McAfee phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Aug 2023 16:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qUEF3-000128-1t

for dave@doctor.nl2k.ab.ca;

Thu, 10 Aug 2023 16:34:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Aug 2023 16:34:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f47.google.com ([209.85.160.47]:51271)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qUCdC-00028Z-05

for webmaster@nk.ca;

Thu, 10 Aug 2023 14:51:45 -0600

Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-1bef8f0904eso1244750fac.2

for ; Thu, 10 Aug 2023 13:49:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1691700576; x=1692305376;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=H8VmuhRf4bdM0hv41kfcelmq11BPBZ4KB2dcH2byKmY=;

b=AP25V6TP0MuMgIDYhxcfqW2fI8cBfdtY4dCGOz+Ttqv0p+9wqO+Om81XpCSoHFbBPz

wQz2YXMr+1mK9lWmDs0zVs+XenkLaDFsdsTeN3AqjIIkt+gahrAJXI9FMB9n5NWZzphp

r2/KBm5ZuySAqN8QVLmZkLvpFHk9IrNauBeBmW3/VwDCe/Y/tQujQxMLO+oMVpqAHZC4

6MdrtoV0v3rmtC1G+BicJP5At5736Jqt1HMGLf3y+5liZLaVQsUCLz/D4OE8yYfitlPx

fhhThgQmZlfV4QVzmZarVT/jJHObfJ7uTPJawwsyim4FdvTBOvnozM4DwTXCrg3qQ74D

ckuQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1691700576; x=1692305376;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=H8VmuhRf4bdM0hv41kfcelmq11BPBZ4KB2dcH2byKmY=;

b=Hn2Qqa2oY0n/A+aZMJrtxTDzjjH9anW5IFeeWm6yMFAsH/+VQNIwfv4cvD0INRJAgL

mEi5TAo7651pvow/eHoVJUPY3u3hYcpX3CTG3x1zc5aHRyoGp4c+kxlEUQG5nhXM9zx2

J5JKVioEYIdmvr9XX7z2pQbg+rdSNNxRRby5DbsnpskuixyclUzHsIGHbQW+0rBodCWR

h7Olq9kmROA0YEs4ueeiLvIN0JOF+nlOJ7QvGWB9N7fm1z43KH1C7fOhrnPzNHAteqIU

P0DLMzbdcI79LQy0hxY0K44+WSiOtudOmIdzatPZQG3YzLeZBO8uWJvQteJzliyPahr2

M8QA==

X-Gm-Message-State: AOJu0YxvV8LEVDIbUS65fIHW6VRDUgOqCSOSUpnEQCSNBhWCPNpBwKxJ

GyD2hLYgxMng1k14uUQ3uL7wDlhyESHWNg==

X-Google-Smtp-Source: AGHT+IH9smcR0GFEOJm7On1MLu/yTjks7XA21bOH3Zv96qXCqh61w+HxXKGynWWyPXx2y8yKERXEJg==

X-Received: by 2002:a05:6870:96a5:b0:1bf:26f0:6b5b with SMTP id o37-20020a05687096a500b001bf26f06b5bmr4662098oaq.32.1691700576359;

Thu, 10 Aug 2023 13:49:36 -0700 (PDT)

Received: from 176.227.243.56 ([176.227.243.56])

by smtp.gmail.com with ESMTPSA id ee15-20020a056870c80f00b001bb58a346b8sm1185230oab.18.2023.08.10.13.49.34

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 10 Aug 2023 13:49:36 -0700 (PDT)

Message-ID: <64d54d60.050a0220.bb11.925e@mx.google.com>

From: "Lino M. Lowe"

Subject: AUTHORIZATION RECEIVED##138107

To: "webmaster"

Content-Type: multipart/alternative; boundary="ZlOFZqZASkc=_8f3MX4UF7hWympWpQWHCt"

MIME-Version: 1.0

Date: Fri, 11 Aug 2023 02:19:35 +0530

X-Antivirus: AVG (VPS 230810-4, 8/10/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--ZlOFZqZASkc=_8f3MX4UF7hWympWpQWHCt

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi there, webmaster@nk.ca



Annual Subscription Reactivated!



Dear existing user, Welcome back!



We welcome you returning for Mcafee-Total services.





Your existing PC and Network Care Services membership has been success=

fully restarted and reactivated on August 10, 2023.



The automatic deduction of $379.95 has been made through an updated pa=

yment source; this charge will appear on the statement in a few hours.=





For any queries or support, Please contact us at +1 (877) 513- 1287. (=

Tollfree)



Here is your order/plan Details-



Invoice No.:- 519452

PC Security and Network Shield Plan

Tenure:- One Year Only

Activation Date:- Aug 10, 2023

Valid Till:- Aug 09, 2024

Payment BY:- Auto Debit

Plan Cost:- $379.95



If you believe this is a disputed transaction, or if you want to disco=

ntinue the services and receive a full refund, please contact us right=

once.



Please contact us immediately to cancel your plan and get full refund,=

Please dail at +1 (877) 513- 1287.





Thanks & regards!



Lino M. Lowe

Support team Manager.





--ZlOFZqZASkc=_8f3MX4UF7hWympWpQWHCt

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline







=20








=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Hi there, webmaster@nk.ca




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>
le=3D"background-color: rgb(255, 255, 255);">Annual Subscription React=

ivated!




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Dear existing user, Welcome back!




font-family: "Times New Roman", Times, serif; font-size: 14px;'>
ng>We welcome you returning for

rgb(243, 121, 52); font-family: "Times New Roman", Times, serif; font-=

size: 14px;'>Mcafee-

le=3D'color: rgb(41, 105, 176); font-family: "Times New Roman", Times,=

serif; font-size: 14px;'>Total

color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif; fon=

t-size: 14px;'> services.







font-family: "Times New Roman", Times, serif; font-size: 14px;'>Your =

existing PC and Network Care Services membership has been successfully=

restarted and reactivated on August 10, 2023.




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>The automatic deduction of $379.95 has been made th=

rough an updated payment source; this charge will appear on the statem=

ent in a few hours.




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>For any queries or support, Please contact us at
trong>+1 (877) 513- 1287. (Tollfree)




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Here is your order/plan Details-
span>




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Invoice No.:- 552394

37);">PC Security and Network Shield Plan

37, 37);">Tenure:- One Year Only
=

Activation Date:- Aug 10, 2023
Va=

lid Till:- Aug 09, 2024
Payment B=

Y:- Auto Debit
Plan Cost:- $379.9=

5




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>If you believe this is a disputed transaction, or i=

f you want to discontinue the services and receive a full refund, plea=

se contact us right once.




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Please contact us immediately to cancel your plan a=

nd get full refund, Please dail at +1 (877) 513- 1287.
trong>







=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Thanks & regards!




=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, serif;=

font-size: 14px;'>Lino M. Lowe

0); font-family: "Times New Roman", Times, serif; font-size: 14px;'>
r>

oman", Times, serif; font-size: 14px;'>Support team Manager.

an style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; fon=

t-size: 15px;">













--ZlOFZqZASkc=_8f3MX4UF7hWympWpQWHCt--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA