McAfee phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Jul 2023 16:14:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJLcL-0007Np-33

for dave@doctor.nl2k.ab.ca;

Tue, 11 Jul 2023 16:13:57 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Jul 2023 16:13:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f174.google.com ([209.85.160.174]:54509)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJH2l-000IOq-2Y

for doctor@nk.ca;

Tue, 11 Jul 2023 11:20:58 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-401e23045beso48298551cf.0

for ; Tue, 11 Jul 2023 10:19:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689095944; x=1691687944;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=c+NEQLFdVCNzP/fEQ3y6mzWHGF4orclozEQRuZye0yg=;

b=lHyMcq7+aw94cf0Jq49xO3bkjL7B7HxEX95eT+L5lZ9cLa8fYA3sVPqp60YtfLa3Sx

IxMJ11IdUJqBdHL0/CKZPNPNXt7GBYf+Qrp+M09GJ6mdxh1aqOBy/q8Dkqghng86F2pv

U9Ld618YCBqUixAP8HYC1Ru/NXK8f9uNYeErieB+2BsPeDpgzujcOeE7IcuJ8YXnvq0D

AB1RU99UdIPpksAaeXgd537xBBY+SALZd91QNKK1uWcgC0ZvX4jqJLOdhLREfpkwAO87

a/jbU42QWd7SgYGwXy4neuHqrgk9VXFtjHpEwcdlxb+Jj1JIRKa09t/ZAhnCgP9P9L85

vykA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689095944; x=1691687944;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=c+NEQLFdVCNzP/fEQ3y6mzWHGF4orclozEQRuZye0yg=;

b=hYPLmzlVXliH62upJHBg/sGNPlfG3RZOYACK4Oq+jiN7XRhxmRECX51tcY3hVG5/lw

M63Lz8cc895PNufQW1TFmGxWwPk1arZ37fb4aZjAQD4BCJjIyETZGQ2cKhyxAE/998x8

7Qz2JUjSRNWedsvkoUBdX/vNSIei6UGAqRnOpLGmRrYfB3OVUx1Y83j+eVx/HoaR/O26

bWau+DVtg3zzxBnE3Mg0TyJq1Fkk3yM1uGmd/WY7Sg2sgk3ilxx2SzeeXyoEkxdpU6uI

Zma6752/PyK7pENMBzDZIaMFVKWWY1FIDYuG9HxbR+Xfy+rovcosevy4M/KJeDPs5Q5E

eW2Q==

X-Gm-Message-State: ABy/qLZGXj25c+zsS2tN4ByGHdCWHAlAzCW74huG9ZHfdPj10sMlc9g1

8Zwkp0Nb2Lp4Pt/hVKa8uQcQdDZvifG0/DXrk7ElHw==

X-Google-Smtp-Source: APBJJlE7ihfPI92azeEWuagZCEGUX3J4X4CUjIpestjffbps4FrAl8Hau5SPLb5uCji7fDr3yno2fw==

X-Received: by 2002:a05:622a:1191:b0:403:a91f:7984 with SMTP id m17-20020a05622a119100b00403a91f7984mr11264853qtk.11.1689095943835;

Tue, 11 Jul 2023 10:19:03 -0700 (PDT)

Received: from 45.88.220.127 ([45.88.220.127])

by smtp.gmail.com with ESMTPSA id f34-20020a05622a1a2200b003f872332a9asm1286126qtb.64.2023.07.11.10.19.02

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 11 Jul 2023 10:19:03 -0700 (PDT)

Message-ID: <64ad8f07.050a0220.a6a2c.47e6@mx.google.com>

From: "Valerie W. Redman"

Subject: Device Code*30937402

To: "doctor"

Content-Type: multipart/alternative; boundary="oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df"

MIME-Version: 1.0

Date: Tue, 11 Jul 2023 22:49:03 +0530

X-Antivirus: AVG (VPS 230711-4, 7/11/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline





Hello there, doctor@nk.ca



Thank you again for your =CE=BFrder!



We are glad to see you registering with us and ch=CE=BF=CE=BFsing us a=

s your preferred PC Care and Network Security provider.



This year's subscription plan renewed on July 11, 2023, and it will be=

valid until July 10, 2024, unless you choose to unsubscribe or drop t=

he charges.



The annual fee of $ 379.99 has been automatically withdrawn from the s=

ame payment source updated in our records, which will reflect on the s=

tatement shortly.



=CE=91nnual Subscription and =CE=9Frder =CE=99nformation:



Customer Unique ID: 94737-88744

Seller's name: MCAfee Total Corp.

Devices covered: 5 devices only.

=CE=A1ayment mode: Auto debit

Order Total: $ 379.99



=CE=A1lease be noted that the annual recurring charge will be automati=

cally debited every year until you decide to cancel, as you opted for =

auto-debit payments last year.



For Cancellation or Refund, please feel free to contact us toll-free a=

t +1 (888) 681-8319.



=20



We hope to see you again soon



Courtney Josselyn

Customer Support Dept. (=CE=9Canager)

Toll-free Number: +1 (888) 681-8319.





--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">
r: rgb(235, 235, 235);">


form: none; text-indent: 0px; letter-spacing: normal; font-family: "Ti=

mes New Roman"; font-size: medium; font-style: normal; font-weight: 40=

0; margin-bottom: 10px !important; word-spacing: 0px; white-space: nor=

mal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: =

initial;'>Hello there,  doctor@nk.ca


, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: nor=

mal; font-family: "Times New Roman"; font-size: medium; font-style: no=

rmal; font-weight: 400; margin-bottom: 10px !important; word-spacing: =

0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial;'>Thank you again for your =CE=BFrder!
>


: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-si=

ze: medium; font-style: normal; font-weight: 400; margin-bottom: 10px =

!important; word-spacing: 0px; white-space: normal; orphans: 2; widows=

: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial;'>We are glad t=

o see you registering with us and ch=CE=BF=CE=BFsing us as your prefer=

red PC Care and Network Security provider.


7, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: no=

rmal; font-family: "Times New Roman"; font-size: medium; font-style: n=

ormal; font-weight: 400; margin-bottom: 10px !important; word-spacing:=

0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial;'>This year's subscription plan renewed =

on July 11, 2023, and it will be valid until July 10, 2024, unless you=

choose to unsubscribe or drop the charges.


37, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: n=

ormal; font-family: "Times New Roman"; font-size: medium; font-style: =

normal; font-weight: 400; margin-bottom: 10px !important; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial;'>The annual fee of $ 379.99 has been a=

utomatically withdrawn from the same payment source updated in our rec=

ords, which will reflect on the statement shortly.


r: rgb(37, 37, 37); text-transform: none; text-indent: 0px; letter-spa=

cing: normal; font-family: "Times New Roman"; font-size: medium; font-=

style: normal; font-weight: 400; margin-bottom: 10px !important; word-=

spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: in=

itial; text-decoration-color: initial;'>
700;">=CE=91

ght: 700;">nnual Subscription and =CE=9Frder =CE=99nformation:
>


dent: 0px; letter-spacing: normal; font-family: "Times New Roman"; fon=

t-size: medium; font-style: normal; font-weight: 400; margin-bottom: 1=

0px !important; word-spacing: 0px; white-space: normal; orphans: 2; wi=

dows: 2; font-variant-ligatures: normal; font-variant-caps: normal; -w=

ebkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=

-decoration-style: initial; text-decoration-color: initial;'>Customer =

Unique ID: 94737-02333
Seller's n=

ame: MCAfee Total Corp.
Devices c=

overed: 5 devices only.
=CE=A1aym=

ent mode: Auto debit
Order Total:=

$ 379.99


text-indent: 0px; letter-spacing: normal; font-family: "Times New Rom=

an"; font-size: medium; font-style: normal; font-weight: 400; margin-b=

ottom: 10px !important; word-spacing: 0px; white-space: normal; orphan=

s: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps: no=

rmal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initi=

al; text-decoration-style: initial; text-decoration-color: initial;'>=CE=

=A1lease be noted that the annual recurring charge will be automatical=

ly debited every year until you decide to cancel, as you opted for aut=

o-debit payments last year.


t-transform: none; text-indent: 0px; letter-spacing: normal; font-fami=

ly: "Times New Roman"; font-size: medium; font-style: normal; font-wei=

ght: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>For Cancellation or Refund, please feel free to conta=

ct us toll-free at 
7, 37); font-weight: 700;">+1 =

(888) 681-8319.


text-transform: none; text-indent: 0px; letter-spacing: normal; font-=

family: "Times New Roman"; font-size: medium; font-style: normal; font=

-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; white=

-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decor=

ation-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;'> 


t-transform: none; text-indent: 0px; letter-spacing: normal; font-fami=

ly: "Times New Roman"; font-size: medium; font-style: normal; font-wei=

ght: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>Best regards,


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: "Times New Roman"; font-size: medium; font-style: normal; font-=

weight: 400; margin-bottom: 10px !important; word-spacing: 0px; white-=

space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial;'>reshad james
=

Customer Support Dept. (=CE=9Canager)

7);">Toll-free Number: 
7, 37, 37); font-weight: 700;">
>+1 (888) 681-8319.



>





--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA