McAfee phish from Google / Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Jul 2023 14:14:05 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qIxGI-0002lE-1p
for dave@doctor.nl2k.ab.ca;
Mon, 10 Jul 2023 14:13:34 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Jul 2023 14:13:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f45.google.com ([209.85.166.45]:51364)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qIxCC-0001Vs-17
for webmaster@nl2k.ab.ca;
Mon, 10 Jul 2023 14:09:23 -0600
Received: by mail-io1-f45.google.com with SMTP id ca18e2360f4ac-7837329a00aso159068939f.2
for; Mon, 10 Jul 2023 13:07:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689019657; x=1691611657;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;
b=kWnoGmpXuJ2CcdGMx+0sOtvqOTk4yeXaoIwLwzYgwe822QsowNat2fPbUQdmBTG/Uo
itCU1JiLLs9fXloJX1J0eKE1qjo8/a42Tm5n2bbeYvpAk5L74dXfYt9icZ1PEKJ+4DtK
sd1VlqpEIoLbYN+vbyaiqhRbur2oKyZuMvBXU+lmCOSp7wT0HtrJEED9HDd7f5x6+oZh
l6k4N5uBrrUwtqsYNXanZoEecCP8jadggizL4PztlAioU/bqM0rEYbxDgq5Q6tALH2Fk
U7mroUCDrLyPqZmRp6chqCnIgrjFMbg95CPhN2CA+B/lJ6A8v+D2jEH/sugxKYo3UFMI
RkVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689019657; x=1691611657;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;
b=cr/xBywuwtXPUhFBO2fMHdOUl+BpF/zX+r0eMeCzhR+i8vHT3aGp64OENw7GMYMxoM
rRBRrwtyJHF064uhgI0oM7j87HGl4UeV2qkhrOhTXSK5arJzqjalI+ZI9q00Kh01EZQc
4zTFg8lXZyQkc96Bmb/UNrlWY8fxijcl96ErE17cJvhi7KtaMamnsImQE0XiUv5bzGcF
q3ZSKHRVzNolgjhXV6Q2pA1k0tCSpWg9zzcTlR6W/YoLTp6+PlcxXr1jAfrcyGntmo/S
OtDLBB2sfh2Zc0UvGQKUpxVTDYfqvhsCmsyXrqrNi0+uA+qiPFS8tkZsNKUJGEOFe5ZS
n6Jg==
X-Gm-Message-State: ABy/qLa/OKaVTMRnbCK/w6IfP+gvp5h1AOASEqs09jZwqYIXvc7FxCzN
h2IXW5h8S0aQcqwfOYWlOKUUNkV5rrEvHu3zzHw=
X-Google-Smtp-Source: APBJJlG95Zc007dAf7cSSCw6+VcRZVxGyoXNcooI4drKrhUr+W9Aa7wn/3W8Gm5s8aVkdrx7tIqOyg==
X-Received: by 2002:a5d:9f14:0:b0:785:d0ee:46b7 with SMTP id q20-20020a5d9f14000000b00785d0ee46b7mr13345195iot.13.1689019657465;
Mon, 10 Jul 2023 13:07:37 -0700 (PDT)
Received: from 64.44.84.67 ([64.44.84.67])
by smtp.gmail.com with ESMTPSA id c22-20020a02a616000000b004165ac64e0asm75894jam.40.2023.07.10.13.07.35
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Jul 2023 13:07:37 -0700 (PDT)
Message-ID: <64ac6509.020a0220.13b09.0304@mx.google.com>
From: "Oakley Mccarty"
Subject: Payment Confirmation Details<7654728>
To: "webmaster"
Content-Type: multipart/alternative; boundary="Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH"
MIME-Version: 1.0
Organization: Invoice Head Support manager
Date: Mon, 10 Jul 2023 13:07:36 -0700
X-Antivirus: AVG (VPS 230710-14, 7/10/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Order Details ( 10 July, 2023 )
Helpline Support:- +1 (888) 851-6501
Dear Client, webmaster@nl2k.ab.ca
Thank you for choosing our services.
=20
Your particular MCafee Total Care subscription expires today. Dependin=
g on the plan you select, this subscription will automatically renew.
Please consider the following purchasing summary.
=20
Billed To :
Consumer ID: 807599553985
Invoice No: 771-6309-MAT-36065
Order No: #APID-58271480
Product Description :=20
A/C Type: Personal PC
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users)
Tenure: 1 Year Subscription
Payment Mode: Auto-Debit
This email verifies that your subscription was extended for an additio=
nal year with the company on July 10, 2023, and is good until July 09,=
2024, at a cost of ($329.99).
Unless you turn it OFF, this subscription will automatically renew eac=
h year. 24 hours before the subscription period ends is the latest.
To unsubscribe the subscription, Call :- +1 (888) 851-6501
Best Regards=20
Oakley Mccarty
Invoice Head Support manager
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=20
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
man", Times, serif; font-size: 16px;'>Order Details ( 10 July, 2023 )<=
br>
Helpline Support:- +1 (888) 851-6501
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Dear User, webmaster@nl2k.ab.ca
T=
hank you for choosing our services.
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Your particular MCafee Total Care subscr=
iption expires today. Depending on the plan you select, this subscript=
ion will automatically renew.
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Please consider the following purchasing=
summary.
Billed To :
=
Consumer ID: 613688419146
Invoice No: 643-6978-RYG-12246
Order N=
o: #PNWV-66310347
Product Description :
trong>
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>A/C Type: Personal PC
Product: MF/PC4=
Charges: $329.99
Device: Window PC (4 users)
Tenure: 1 Year =
Subscription
Payment Mode: Auto-Debit
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Jul 2023 14:14:05 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qIxGI-0002lE-1p
for dave@doctor.nl2k.ab.ca;
Mon, 10 Jul 2023 14:13:34 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Jul 2023 14:13:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f45.google.com ([209.85.166.45]:51364)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qIxCC-0001Vs-17
for webmaster@nl2k.ab.ca;
Mon, 10 Jul 2023 14:09:23 -0600
Received: by mail-io1-f45.google.com with SMTP id ca18e2360f4ac-7837329a00aso159068939f.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689019657; x=1691611657;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;
b=kWnoGmpXuJ2CcdGMx+0sOtvqOTk4yeXaoIwLwzYgwe822QsowNat2fPbUQdmBTG/Uo
itCU1JiLLs9fXloJX1J0eKE1qjo8/a42Tm5n2bbeYvpAk5L74dXfYt9icZ1PEKJ+4DtK
sd1VlqpEIoLbYN+vbyaiqhRbur2oKyZuMvBXU+lmCOSp7wT0HtrJEED9HDd7f5x6+oZh
l6k4N5uBrrUwtqsYNXanZoEecCP8jadggizL4PztlAioU/bqM0rEYbxDgq5Q6tALH2Fk
U7mroUCDrLyPqZmRp6chqCnIgrjFMbg95CPhN2CA+B/lJ6A8v+D2jEH/sugxKYo3UFMI
RkVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689019657; x=1691611657;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;
b=cr/xBywuwtXPUhFBO2fMHdOUl+BpF/zX+r0eMeCzhR+i8vHT3aGp64OENw7GMYMxoM
rRBRrwtyJHF064uhgI0oM7j87HGl4UeV2qkhrOhTXSK5arJzqjalI+ZI9q00Kh01EZQc
4zTFg8lXZyQkc96Bmb/UNrlWY8fxijcl96ErE17cJvhi7KtaMamnsImQE0XiUv5bzGcF
q3ZSKHRVzNolgjhXV6Q2pA1k0tCSpWg9zzcTlR6W/YoLTp6+PlcxXr1jAfrcyGntmo/S
OtDLBB2sfh2Zc0UvGQKUpxVTDYfqvhsCmsyXrqrNi0+uA+qiPFS8tkZsNKUJGEOFe5ZS
n6Jg==
X-Gm-Message-State: ABy/qLa/OKaVTMRnbCK/w6IfP+gvp5h1AOASEqs09jZwqYIXvc7FxCzN
h2IXW5h8S0aQcqwfOYWlOKUUNkV5rrEvHu3zzHw=
X-Google-Smtp-Source: APBJJlG95Zc007dAf7cSSCw6+VcRZVxGyoXNcooI4drKrhUr+W9Aa7wn/3W8Gm5s8aVkdrx7tIqOyg==
X-Received: by 2002:a5d:9f14:0:b0:785:d0ee:46b7 with SMTP id q20-20020a5d9f14000000b00785d0ee46b7mr13345195iot.13.1689019657465;
Mon, 10 Jul 2023 13:07:37 -0700 (PDT)
Received: from 64.44.84.67 ([64.44.84.67])
by smtp.gmail.com with ESMTPSA id c22-20020a02a616000000b004165ac64e0asm75894jam.40.2023.07.10.13.07.35
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Jul 2023 13:07:37 -0700 (PDT)
Message-ID: <64ac6509.020a0220.13b09.0304@mx.google.com>
From: "Oakley Mccarty"
Subject: Payment Confirmation Details<7654728>
To: "webmaster"
Content-Type: multipart/alternative; boundary="Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH"
MIME-Version: 1.0
Organization: Invoice Head Support manager
Date: Mon, 10 Jul 2023 13:07:36 -0700
X-Antivirus: AVG (VPS 230710-14, 7/10/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Order Details ( 10 July, 2023 )
Helpline Support:- +1 (888) 851-6501
Dear Client, webmaster@nl2k.ab.ca
Thank you for choosing our services.
=20
Your particular MCafee Total Care subscription expires today. Dependin=
g on the plan you select, this subscription will automatically renew.
Please consider the following purchasing summary.
=20
Billed To :
Consumer ID: 807599553985
Invoice No: 771-6309-MAT-36065
Order No: #APID-58271480
Product Description :=20
A/C Type: Personal PC
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users)
Tenure: 1 Year Subscription
Payment Mode: Auto-Debit
This email verifies that your subscription was extended for an additio=
nal year with the company on July 10, 2023, and is good until July 09,=
2024, at a cost of ($329.99).
Unless you turn it OFF, this subscription will automatically renew eac=
h year. 24 hours before the subscription period ends is the latest.
To unsubscribe the subscription, Call :- +1 (888) 851-6501
Best Regards=20
Oakley Mccarty
Invoice Head Support manager
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=20
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
man", Times, serif; font-size: 16px;'>Order Details ( 10 July, 2023 )<=
br>
Helpline Support:- +1 (888) 851-6501
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Dear User, webmaster@nl2k.ab.ca
T=
hank you for choosing our services.
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Your particular MCafee Total Care subscr=
iption expires today. Depending on the plan you select, this subscript=
ion will automatically renew.
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Please consider the following purchasing=
summary.
Billed To :
=
Consumer ID: 613688419146
Invoice No: 643-6978-RYG-12246
Order N=
o: #PNWV-66310347
Product Description :
trong>
bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =
margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>A/C Type: Personal PC
Product: MF/PC4=
Charges: $329.99
Device: Window PC (4 users)
Tenure: 1 Year =
Subscription
Payment Mode: Auto-Debit
nt-size: 16px;'>This email verifies that your subscription was extende=
d for an additional year with the company on July 10, 2023
u>, and is good until July 09, 2024, at a cost of ($329.99=
).
Unless you turn it OFF, this subscription will automatically=
renew each year. 24 hours before the subscription period ends is the =
latest.
To unsubscribe the subscription,
olor: rgb(41, 105, 176); font-family: "Times New Roman", Times, serif;=
font-size: 16px;'>
Roman", Times, serif; font-size: 16px;'>
rgb(41, 105, 176);">Call :- +1 (888) 851-6501<=
/p>
nt-size: 16px;'>Regards,
Oakley Mccarty
Invoice Head Support=
manager
--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments