McAfee phish from Google / Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Jul 2023 14:51:32 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qMabO-000Fjm-0Y
for dave@doctor.nl2k.ab.ca;
Thu, 20 Jul 2023 14:50:22 -0600
Resent-From: The Doctor
Resent-Date: Thu, 20 Jul 2023 14:50:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f169.google.com ([209.85.219.169]:53551)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qMUj1-0001eP-25
for webmaster@nk.ca;
Thu, 20 Jul 2023 08:33:55 -0600
Received: by mail-yb1-f169.google.com with SMTP id 3f1490d57ef6-bfe6ea01ff5so790685276.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689863522; x=1690468322;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=RfisOfHDAtnKu9kxEOhN7ugQBH8ftbJxJU8bp7zKfqI=;
b=jzp8BJMZuxjxJDVti0eviT3Wh6/rGrUivYWHDwdUNDbZDuF8BIayybv6rcBWcStuAG
NUwpnOMW5uPDuj8E9jPSYdb6uLtjwALHwc/LXr9rC+7RPCsPKBBb5+QPFFsoDEwczBGI
dtmFMXWzotB4DXQ18KflitHYvr4YQNjdQFJaD5sNOiMnRucfWXixZyqWDf4+5WnQMBLD
S5pG4ndDWeEZzqADfDq0+Y5MY4gZq6887Yv7yP2AZSi8nEIxwFT2UFuoLlGQ+MnnKESv
3dzXgRthIe46CvesZqk2iGdHUvudUv5YLnlgN3nb+shWHHb0CsKgcfd6M9bLviXzfmVD
SNcA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689863522; x=1690468322;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=RfisOfHDAtnKu9kxEOhN7ugQBH8ftbJxJU8bp7zKfqI=;
b=LTTv5L/tjF9ZuUN1V4HOU1x0/y4jN8VELZVz6gMswzQJQuvdh425Fs7ara/w4/OPhD
c9hGockWSLWldzdtlnR069CcwmwJvioe2l5X+f+nYaRpCOIYmjp+bNtvFqn3/bjtBgLr
wCTqsUhML9BlBODMsR4+swnl61edXQrLR4LSYS9JEZ9HcUqGWA9QfUjoQqEANtiynh+f
8Z2WCZE1R6Tr4+p45TEJpYmlT0OhAcG0M/8vE3/4DUpQYARS9GLR4K1oFGkCgAdbY5z1
8pDsaS4iTIXx7lImU5e9S/ac6OKYGzMZydpFUcyv+JB1SLvUU0JTt93/EWt45n5euyr8
BzjQ==
X-Gm-Message-State: ABy/qLZvxTLUJyfdszYYKzVkIjTtKncTZiJhhZozFVQz3QFZ9aI5yxNz
mbJKURC/0kaExJZ0MVuxBYjYcGk2VwID7yryGc1b+Q==
X-Google-Smtp-Source: APBJJlHRNI1YTwnStiOyK8GNFmuK7jwOm1zTwvMKhDmHp36FUka/qTjFV/qm9/o+ngMpMt/0AHRMRg==
X-Received: by 2002:a25:bb90:0:b0:cfe:74cf:e626 with SMTP id y16-20020a25bb90000000b00cfe74cfe626mr1357793ybg.51.1689863522070;
Thu, 20 Jul 2023 07:32:02 -0700 (PDT)
Received: from 194.233.98.19 ([181.214.150.97])
by smtp.gmail.com with ESMTPSA id z32-20020a25ada0000000b00c5cac376dffsm231997ybi.22.2023.07.20.07.32.00
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 20 Jul 2023 07:32:01 -0700 (PDT)
Message-ID: <64b94561.250a0220.67287.157a@mx.google.com>
From: "Journi E. Colclough"
Subject: Check Your Order Details#473963
To: "webmaster"
Content-Type: multipart/alternative; boundary="X=_wZ9rVixSynQFtu2vRWtSwX4XRERNyOt"
MIME-Version: 1.0
Organization: Service Helpline Desk
Date: Thu, 20 Jul 2023 21:32:01 +0700
X-Antivirus: AVG (VPS 230720-2, 7/20/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--X=_wZ9rVixSynQFtu2vRWtSwX4XRERNyOt
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hello dear client,, webmaster@nk.ca
We thank you for choosing us again!
This is a friendly reminder to inform you that your PC Care annual sub=
script=C3=ACon has been successfully reactivated and renewed.
The amount of $ 375.99 has been automatically withdrawn from the same =
payment source updated in our records, which will reflect on the state=
ment shortly.
Here are your Subscription and Order Details:
Customer Unique ID: 94737-50672
Seller's name: MCAfee Total Corp.
Expiration date: July 19, 2024
Payment method: Auto debit
Order Total: $ 375.99
Please be informed that the recurring fee will be charged annually and=
will be debited again on July 19, 2024, unless you choose to cancel t=
he subscr=C3=ACption.
In any circumstances where you wish to opt out or stop auto-debit paym=
ents and want the full amount refunded back, please contact us now to =
avoid any transactional disputes.
For refunds and cancellations, please reach out to us immediately at +=
1 (888) 575-7611.
=20
Many thankful
Journi E. Colclough
Customer Helpline Dept.
Toll-free: +1 (888) 575-7611.
--X=_wZ9rVixSynQFtu2vRWtSwX4XRERNyOt
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hello dea=
r subscriber,, webmaster@nk.ca
We thank =
you for choosing us again!
This is a=
friendly reminder to inform you that your PC Care annual subscript=C3=
=ACon has been successfully reactivated and renewed.
The amoun=
t of $ 375.99 has been automatically withdrawn from the same payment s=
ource updated in our records, which will reflect on the statement shor=
tly.
tyle=3D"color: rgb(37, 37, 37);">Here are your Subscription and Order =
Details:
Customer =
Unique ID: 94737-384865
Seller's =
name: MCAfee Total Corp.
Expirati=
on date: July 19, 2024
Payment me=
thod: Auto debit
Order Total: $ 3=
75.99
Please be=
informed that the recurring fee will be charged annually and will be =
debited again on July 19, 2024, unless you choose to cancel the subscr=
=C3=ACption.
In any ci=
rcumstances where you wish to opt out or stop auto-debit payments and =
want the full amount refunded back, please contact us now to avoid any=
transactional disputes.
For refun=
ds and cancellations, please reach out to us immediately at
yle=3D"color: rgb(37, 37, 37);">+1 (888) 575-7611.
>
Thank you=
for trust with us!
Journi E.=
Colclough
Customer Helpline Dept=
=2E
Toll-free:
=3D'text-align: center; color: rgb(37, 37, 37); text-transform: none; =
text-indent: 0px; letter-spacing: normal; font-family: "Times New Roma=
n"; font-size: medium; font-style: normal; font-weight: 700; word-spac=
ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color=
: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-cap=
s: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =
initial; text-decoration-style: initial; text-decoration-color: initia=
l;'>+1 (888) 575-7611.
--X=_wZ9rVixSynQFtu2vRWtSwX4XRERNyOt--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments