Norton phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Aug 2023 05:46:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWbRq-0008dw-0q

for dave@doctor.nl2k.ab.ca;

Thu, 17 Aug 2023 05:45:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Aug 2023 05:45:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f193.google.com ([209.85.128.193]:46350)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWakE-000Cgw-1x

for doctor@doctor.nl2k.ab.ca;

Thu, 17 Aug 2023 05:00:59 -0600

Received: by mail-yw1-f193.google.com with SMTP id 00721157ae682-58439daf39fso79201117b3.1

for ; Thu, 17 Aug 2023 03:58:51 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692269925; x=1692874725;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=QQXiesxwHqYS/rxda0paTkrRhoqyhwOUbfiHO4HXzsk=;

b=ocA1mrZWEZ70hlIMEnB5Eep+tHp1BbqUNjxD0WTvpRAGxmdnTuzwdLiw7ImC9pYUic

MR1Z5u8/YHxkq9w+acItnQ4uj/sp9EtWQZTGFunuPXhAO5CpBI7OkIxDAB+EpmhA7PS5

gbN3kzwc1W/xl7Km4UwHCXmCJngQRfeRZBpIAKHMFj/EONdvCg8xKudqpgKWXwk6hrFu

xzV4eVttkE7sB/3znONsz3sNuJuoNbruR1mQkEfDP0DuEYh6AL+Igd4sfMaeIL80CZSs

zKyW9RNnX/r4D+ICzhmc76cRD2BONQZw5LNVI4tqJeMkSbeLgH58vU57pY5T7spclRZj

NNQA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692269925; x=1692874725;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=QQXiesxwHqYS/rxda0paTkrRhoqyhwOUbfiHO4HXzsk=;

b=MZxpM/ReTpeBq8Rpl7SzhCDAo4TcpkFLWllVv+WDKpLa5uRhqVtBz6rJcdhxdqM8hX

04U3IXxCVTQFFG+v2SDi/PbD593oy0pfFJW5WxYyp3oegG11QapDnQYYrTMCmUOq1Uf3

7oNWovpkm2pqFo1ia41vpU4B9wvXMQB+VyposlDiRetQ8OFOvU2nRHLGLMMsSXjV1K5i

BqeyyNoJBrqBR1ZnFl4ZYnOfxLsSYf3T3Bbd14P6aWgF7EzFOmFDnsfHE1iURXJ7BI+o

6+gBp3h5JUcpGriGFmc78ySm72JRJxY1o1awoN0q4xQm0m8wQVNsLKVPup5Gt7heRtha

YVWw==

X-Gm-Message-State: AOJu0Ywb7EXo5Ptnuelk1Ilp6/9VfXJjyXPT6CN1op2JqvXhvaXZT3wq

Sg5BoxdyOr3kgYuHIz+P/LmTnVPOWJYpDH3/IWQiAg==

X-Google-Smtp-Source: AGHT+IHrC8d3RPz2BRAaGz7SPtk31ImQXvFl7iwlbAHntGRUrS/l+NL+9khtigkr790AQbHjF0pVWw==

X-Received: by 2002:a0c:aa51:0:b0:649:bf3:6dcb with SMTP id e17-20020a0caa51000000b006490bf36dcbmr3942696qvb.58.1692269290670;

Thu, 17 Aug 2023 03:48:10 -0700 (PDT)

Received: from EC2AMAZ-6LQ7CM6 (ec2-54-198-33-63.compute-1.amazonaws.com. [54.198.33.63])

by smtp.gmail.com with ESMTPSA id r6-20020a0ce286000000b0063f5c72f771sm4201575qvl.28.2023.08.17.03.48.10

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 17 Aug 2023 03:48:10 -0700 (PDT)

Message-ID: <64ddfaea.0c0a0220.43f04.1622@mx.google.com>

Date: Thu, 17 Aug 2023 03:48:10 -0700 (PDT)

X-Google-Original-Date: 17 Aug 2023 10:48:10 +0000

MIME-Version: 1.0

From: "Invoice_732095"

To: doctor@doctor.nl2k.ab.ca

Subject: Payment Confirmation 08-17-2023

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

X-Antivirus: AVG (VPS 230816-6, 8/16/2023), Inbound message

X-Antivirus-Status: Clean



PFNQQU4gbGFuZz1FTj4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQg

ZmFjZT1TeXN0ZW0+R3JlZXRpbmdzIGZyb20gTm9ydG9uITwvRk9OVD48L1A+DQo8UCBk

aXI9bHRyIGFsaWduPWxlZnQ+PEZPTlQgc2l6ZT00IGZhY2U9U3lzdGVtPkhlbGxvIENs

aWVudCw8L0ZPTlQ+PC9QPg0KPFAgZGlyPWx0ciBhbGlnbj1sZWZ0PjxGT05UIHNpemU9

NCBmYWNlPVN5c3RlbT5XZSBhcHByZWNpYXRlIHlvdXIgdXNlIG9mIG91ciBvZmZlcmlu

Z3MuIFlvdXIgc2VydmljZXMgaGF2ZSBiZWVuIHJlbmV3ZWQgb24gdGhlaXIgb3duLiBZ

b3VyIGVtYWlsIGFkZHJlc3MgaGFzIGFscmVhZHkgcmVjZWl2ZWQgYWxsIG90aGVyIGlu

Zm9ybWF0aW9uLjwvRk9OVD48L1A+DQo8UCBkaXI9bHRyIGFsaWduPWxlZnQ+PEZPTlQg

c2l6ZT00IGZhY2U9U3lzdGVtPldlIGFwcHJlY2lhdGUgeW91IGRvaW5nIGJ1c2luZXNz

IHdpdGggdXMgcmVjZW50bHkuPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVm

dD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+T3JkZXIgc3VtbWFyeTotPC9GT05UPjwv

UD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+

UmVmZXJlbmNlIE51bWJlci0gOTI2MDM4NTI8L0ZPTlQ+PC9QPg0KPFAgZGlyPWx0ciBh

bGlnbj1sZWZ0PjxGT05UIHNpemU9NCBmYWNlPVN5c3RlbT5PcmRlciBJRC0gS1hSREFR

OTUxNzM1MDgyPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBz

aXplPTQgZmFjZT1TeXN0ZW0+UmVuZXdhbCBkYXRlLSBUaHVyc2RheSwgQXVndXN0IDE3

LCAyMDIzPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXpl

PTQgZmFjZT1TeXN0ZW0+VGVybSBwbGFuLSAzNiBNb250aHM8L0ZPTlQ+PC9QPg0KPFAg

ZGlyPWx0ciBhbGlnbj1sZWZ0PjxGT05UIHNpemU9NCBmYWNlPVN5c3RlbT5TaGlwcGlu

Zy0gJDAuMDA8L0ZPTlQ+PC9QPg0KPFAgZGlyPWx0ciBhbGlnbj1sZWZ0PjxGT05UIHNp

emU9NCBmYWNlPVN5c3RlbT5Ub3RhbCBhbW91bnQtICQxODkuOTA8L0ZPTlQ+PC9QPg0K

PFAgZGlyPWx0ciBhbGlnbj1sZWZ0PjxGT05UIHNpemU9NCBmYWNlPVN5c3RlbT5XZSBh

cmUgZGVkaWNhdGVkIHRvIG9mZmVyaW5nIHF1aWNrIGFuZCBlZmZlY3RpdmUgY3VzdG9t

ZXIgc3VwcG9ydCBzbyB0aGF0IHlvdXIgbmVlZHMgYXJlIG1ldCByaWdodCBhd2F5Ljwv

Rk9OVD48L1A+DQo8UCBkaXI9bHRyIGFsaWduPWxlZnQ+PEZPTlQgc2l6ZT00IGZhY2U9

U3lzdGVtPlBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBnZXQgaW4gdG91Y2ggd2l0aCB1

cyBpZiB5b3UgaGF2ZSBhbnkgcXVlcmllcyBvciBpc3N1ZXMgYXQgKzEgODc3IDk1OS01

MzI0LjwvRk9OVD48L1A+DQo8UCBkaXI9bHRyIGFsaWduPWxlZnQ+PEZPTlQgc2l6ZT00

IGZhY2U9U3lzdGVtPkJlc3Qgd2lzaGVzLDwvRk9OVD48L1A+DQo8UCBkaXI9bHRyIGFs

aWduPWxlZnQ+PEZPTlQgc2l6ZT00IGZhY2U9U3lzdGVtPlRlYW0gTm9ydG9uPC9GT05U

PjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0

ZW0+PC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQg

ZmFjZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48

Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIg

YWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4N

CjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+44CA

PC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFj

ZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxpZ249bGVmdD48Rk9O

VCBzaXplPTQgZmFjZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4NCjxQIGRpcj1sdHIgYWxp

Z249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+44CAPC9GT05UPjwvUD4NCjxQ

IGRpcj1sdHIgYWxpZ249bGVmdD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+44CAPC9G

T05UPjwvUD48L1NQQU4+DQo8UD48Rk9OVCBzaXplPTQgZmFjZT1TeXN0ZW0+PC9GT05U

PiZuYnNwOzwvUD4=



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA