McAfee phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Aug 2023 11:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qUW8E-000BKX-28

for dave@doctor.nl2k.ab.ca;

Fri, 11 Aug 2023 11:41:02 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Aug 2023 11:41:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f177.google.com ([209.85.214.177]:52377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qUSiW-000LEF-1E

for games@nl2k.ab.ca;

Fri, 11 Aug 2023 08:02:23 -0600

Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-1bdc19b782aso2311565ad.0

for ; Fri, 11 Aug 2023 07:00:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1691762411; x=1692367211;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=ZLYK4hcaPXzE+eEsLhJsJ+jH8/4ATC4Eh1NXovkT6rI=;

b=Zg/BWPp4WDlZfSBG/km7JK3aAclyHXv1OfIpM8Hh+cqD13ZHoe0ZwZTX31e4greBkD

MWHTuT2cCubsPkeLGYqKEF+3fXPbYd0ihudFydyIRDvEItoAjSlN3HOwNK/9XipfumVF

Jo7AXigOjZRMxz7xpnSU4rBq+rSa4K3bZ2DcxVFTGJecCWSeiIVgl246o5AnVFBUWkLz

Uv6+bZXECMxaVD5sNAMTAmHH5Lm1UsLDV2u4F8YywU7uHRwonuxcCCu5XhYdIAhbhzMg

64lNGlMi8WA2peB4woTp6XFsBRRyPypMpf6wt95O0AE9kABOY3qpMpuQEBt42NhStwBs

3T1w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1691762411; x=1692367211;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZLYK4hcaPXzE+eEsLhJsJ+jH8/4ATC4Eh1NXovkT6rI=;

b=jrMu5+Lv/+QMa4LwDN9LZ6H+G+6JJ/NGGW3mexJHtd0lNqiNtBF+dTRePpAAjddroM

xmtz2UOSCVn1LLtCaKRxA9cwQMHV3Fm7Fo4YJUNkKk8xBclU7OIEAXmctP0WaorC6hBM

FpbMtfCltRBz0lVUAccFcG3dkuMq95rAxZ5bFE9jG1LGeTfoPNTglsgV8Nu1NN30LbWx

SExzIpHTUiu8AdDPtXYnu3eFMfGR4aJk9cW+I1NfXuGV3r297ylsTm9U7Wj8H4nrQsVU

H5byRk59iE8Izr+/EVfz3Pwsmcb8i+eVyH4Dit7SPdrjSXzadpi1uQ6sgUeo2A3ca80S

R55Q==

X-Gm-Message-State: AOJu0YylQyS9f687MAzOPGBzLKZeq1gVWeqRo0GHajlwWWtxe0cauuEJ

Jo+Xz+ZuPuMGETeXIO+Xo09LrnlswIiaa2WoiOMe9A==

X-Google-Smtp-Source: AGHT+IEtzQJhS1AWPOtFhmWwZwLEWK6q0xhByUwF6xc3W5/FfaGHuau999JoLquoZF4/ruzb+kXnPQ==

X-Received: by 2002:a17:903:41c8:b0:1b7:e86f:7631 with SMTP id u8-20020a17090341c800b001b7e86f7631mr2035493ple.19.1691762410675;

Fri, 11 Aug 2023 07:00:10 -0700 (PDT)

Received: from 83.171.250.67 ([83.171.250.67])

by smtp.gmail.com with ESMTPSA id jg6-20020a17090326c600b001bb54abfc07sm3934683plb.252.2023.08.11.07.00.09

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 11 Aug 2023 07:00:10 -0700 (PDT)

Message-ID: <64d63eea.170a0220.976b8.70c4@mx.google.com>

From: "Brad P. Dunkley"

Subject: Plan Renewal Details

To: "games"

Content-Type: multipart/alternative; boundary="qA1=_Inwmh5jaYWZTAvXZD1Y7Q4OsbkFXY"

MIME-Version: 1.0

Organization: Online Service Support manager

Date: Fri, 11 Aug 2023 19:30:09 +0530

X-Antivirus: AVG (VPS 230810-4, 8/10/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--qA1=_Inwmh5jaYWZTAvXZD1Y7Q4OsbkFXY

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear Customer, games@nl2k.ab.ca



Thank you for your order! We are glad to see you again.



This email is to notify you that we have once again renewed and reacti=

vated your P=C3=87 Care annual subscription as requested by you.



This subscription covers five home devices and provides you with benef=

its like PC security, a network shield, data protection, identity moni=

toring, and web protection.



The annual fee of [$ 379.99] has been successfully processed from the =

updated payment source; the amount will appear on the statement within=

24 hours as a MTC*=C3=87T charge.



Details about the order:





Customer ID: BN-T72212338

Seller's Name: MCAFEE Total Corp.

Renewal Date: August 11, 2023

Date of Expiry: August 10, 2024

Payment Mode: Automatic Debit

Subscription Fee: [$ 379.99]



In any circumstances wherein you wish to deactivate the services or ha=

lt auto-debit payments and want a full refund, please contact our supp=

ort team immediately to avoid any disputes.



Toll-free number for support: (+1 (844) 205 6986)



=20



We are thankful to you,



Brad P. Dunkley

Invoice Head Support manager

Toll-free: (+1 (844) 205 6986)





--qA1=_Inwmh5jaYWZTAvXZD1Y7Q4OsbkFXY

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline














le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Dear Customer, games@nl2k.ab.ca




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Thank you for your order! We are glad to see you again.




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

This email is to notify you that we have once again renewed and reacti=

vated your P=C3=87 Care annual subscription as requested by you.
>




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

This subscription covers five home devices and provides you with benef=

its like PC security, a network shield, data protection, identity moni=

toring, and web protection.




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

The annual fee of [$ 379.99] has been successfully processed from the =

updated payment source; the amount will appear on the statement within=

24 hours as a MTC*=C3=87T charge.




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Details about the order:




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Customer ID: BN-T28884223
Seller'=

s Name: MCAFEE Total Corp.
Renewa=

l Date: August 11, 2023
Date of E=

xpiry: August 10, 2024
Payment Mo=

de: Automatic Debit
Subscription =

Fee: [$ 379.99]




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

In any circumstances wherein you wish to deactivate the services or ha=

lt auto-debit payments and want a full refund, please contact our supp=

ort team immediately to avoid any disputes.




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Toll-free number for support:
5, 176);">(

176);">+1 (844) 205 6986)




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

 




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

We are thankful to you,




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Brad P. Dunkley
Invoice Head Supp=

ort manager
Toll-free:
pan style=3D"color: rgb(41, 105, 176);">(

g>
an", Times, serif; font-size: 15px;'>+1 (844) 205 6986)

g>













--qA1=_Inwmh5jaYWZTAvXZD1Y7Q4OsbkFXY--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA