Mcafee phish from google gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Aug 2023 18:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWmyx-000DJa-0g

for dave@doctor.nl2k.ab.ca;

Thu, 17 Aug 2023 18:04:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Aug 2023 18:04:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f175.google.com ([209.85.160.175]:39100)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWkPy-0009rY-07

for doctor@nk.ca;

Thu, 17 Aug 2023 15:20:37 -0600

Received: by mail-qt1-f175.google.com with SMTP id d75a77b69052e-4106eb061b9so570131cf.0

for ; Thu, 17 Aug 2023 14:18:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692307109; x=1692911909;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=laqHPhYijdKJtq3wxt0TJ+p5s9OM0VQnioUxWPoe7/0=;

b=p7gVrA5oMMCUJ5hGOJhYzSiMuPtkOc5H+PaBvER2v5l9P/T4rwyP2nSe0VOj5MaLXB

b9/TwvlTIxjZE7CEoYpkgRrhzU3kQAGPsrgIPV19/fKKHEYmlE8ZsyROPr435rmQfFtE

JGeP9E0vKnrvUrJASgTVavoc8l2ypWl8QISTyWKoWz0nqKWM5zQf/qKsFky1PAXTYiGL

Dix5kUcf2qgk99AvuA8PuZX4BlgMqxuUTy413QoRlRop0yASaSEK2QGodsBm6Rj7k/ET

/vCG9twqNmfOqqxRMUx7nAsh3HIBJXtHFa+ZzvRdW/JnEn0aAJxYdu0aFob8Eo2jthus

epLw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692307109; x=1692911909;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=laqHPhYijdKJtq3wxt0TJ+p5s9OM0VQnioUxWPoe7/0=;

b=OK0UY31g6wmulzY+WYaytLjp/bTbpxltIjWmR5RKr4fd4Skbw4EQssdkS6euqA+Pfl

+zgGTV2pLKNKZqnBBtlDwxAjnOQk13DGBePe9oXtkbxUzAOTQSnHo8qUlfelRQGaBLpK

ohDnGrYl2oecdEN/bqX1/t8K2kKcULJTrJ7z5lAWmmra/IAqvGy7vPjcN0yv06BZ9Qe8

69mRRxYmgZaTcV4fyfSnlTNvgFJAQqUQeg89xx3Sg9HHYw/P7xzvG1xnP4KZKNFSSmuD

ib9GjupAihpsvnwtv4i/d2lrTIeo+bl4BwC5UIu0wx8K2h8rXnJ1cnrnet9alPvd/vlI

tR2w==

X-Gm-Message-State: AOJu0YyDjMWcv1IzZX6J4bAxFpsxhmc/TOHTuTLyF8sR9KoJbWVCRbHQ

Ui5UEurWm9RgHjGtMVkq+XFZcgzH9yGmtGP4ssA=

X-Google-Smtp-Source: AGHT+IExDsdBDxQQIP/NjI04Pnm63ancq/NxrTVY99DBoaGo4mnLDVFFWiIEjH9ymT049sMLUgZ1Cg==

X-Received: by 2002:a05:6214:621:b0:63d:2d7e:39f1 with SMTP id a1-20020a056214062100b0063d2d7e39f1mr904628qvx.2.1692307109035;

Thu, 17 Aug 2023 14:18:29 -0700 (PDT)

Received: from 86.48.15.158 ([86.48.15.158])

by smtp.gmail.com with ESMTPSA id p16-20020a0cf550000000b0063d152e5d9asm149350qvm.120.2023.08.17.14.18.27

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 17 Aug 2023 14:18:28 -0700 (PDT)

Message-ID: <64de8ea4.0c0a0220.5f1c0.13f5@mx.google.com>

From: "Joe F. Kelley"

Subject: Smooth Transition: Your Plan Has Been Automatically Renewed

To: "doctor"

Content-Type: multipart/alternative; boundary="RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m"

MIME-Version: 1.0

Date: Fri, 18 Aug 2023 02:48:27 +0530



This is a multi-part message in MIME format



--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear client , doctor@nk.ca



Annual Contract Renewal Notice!



Thank you for choosing the "MCAfee-Total" PC Protection Shield.



This is to inform you that, as of August 17, 2023, your yearly subscri=

ption has been revived and will be valid through August 16, 2024.



Since you selected auto debit, the sum of ($349.99) is processed from =

the updated payment source; the same recurring cost will be deducted o=

nce again the following year.



For immediate queries - Contact Helpdesk +1 (818) 214-4094. (Toll-Fre=

e)



Order Information :





Reference ID : 974-2295-3164

Advanced PC Protection Shield

Payment Mode : Auto Debit

Devices Covered : 04 only

Subscription fee : $ 349.99



Please be noted that if you feel you didn=E2=80=99t authorize the char=

ge or you don't want to continue the service, Kindly reach out to us i=

mmediately at +1 (818) 214-4094.



For refunds and cancellations, please contact our customer helpline nu=

mber immediately to avoid any transactional disputes.



=20



With sincere thanks!



Joe F. Kelley=20

Accounts Team (Manager)





This is system-generated email. Please do not reply to this email addr=

ess. (1) Call our 24-hour customer care line.





--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Hi Dear, doctor@nk.ca




7, 37, 37);">Annual Contract Renewal Notice!



Thank you for choosing the "M=

CAfee-Total" PC Protection Shield.



This is to inform you that, as of August 17, 2023, your =

yearly subscription has been revived and will be valid through Augu=

st 16, 2024.



Since you selected auto debit, the sum of ($349.99) is processe=

d from the updated payment source; the same recurring cost will be ded=

ucted once again the following year.



To cancel, modify or reorder =

please feel free to contact us toll-free +1 (818) 214-4094
trong>. (Toll-=

Free)




7, 37, 37);">Order Information :
: rgb(37, 37, 37);">

>

Reference ID : 974-2295-3164<=

br style=3D"color: rgb(37, 37, 37);">Advanced PC Protection Shield

style=3D"color: rgb(37, 37, 37);">Payment Mode : Auto Debit

"color: rgb(37, 37, 37);">Devices Covered : 04 only

rgb(37, 37, 37);">Subscription fee : $ 349.99



Please be noted that if you f=

eel you didn=E2=80=99t authorize the charge or you don't want to conti=

nue the service, Kindly reach out to us immediately at
le=3D"color: rgb(37, 37, 37);"> +1 (818) 214-409=

4.



For refunds and cancellations=

, please contact our customer helpline number immediately to avoid any=

transactional disputes.



 



Best regards!



Joe F. Kelley 
The Bi=

lling Team





7, 37);">T=

his is system-generated email. Please do not reply to this email addre=

ss. (1) Call our 24-hour customer care line.













--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA