McAfee phish from Google / Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Nov 2023 10:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qyaOO-000OdN-2m
for dave@doctor.nl2k.ab.ca;
Thu, 02 Nov 2023 10:18:00 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Nov 2023 10:18:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f196.google.com ([209.85.167.196]:47230)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qyYsF-000KXs-0E
for doctor@doctor.nl2k.ab.ca;
Thu, 02 Nov 2023 08:40:46 -0600
Received: by mail-oi1-f196.google.com with SMTP id 5614622812f47-3b565e35fedso569305b6e.2
for; Thu, 02 Nov 2023 07:38:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698935918; x=1699540718; darn=doctor.nl2k.ab.ca;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=5pszKKjxXCH/jBp+kILmOGqR+eePvBA7dFgF6MTnviY=;
b=LElukVcQZAtERtyrBODMdQxKmGUPGkZllCstaUNK7ZZIUAPLc16sCeWT9e1SundmVO
O7Uwbwab7Zvxyb/aNpifMxtC0/Q8W6eldxPV9lt4TuZR3dwpxgKVVktOB25Rku+wNBH0
FcthOYasTFgLKX08mS0cPVyvDQp3pTD9Ejv4+uui7QCVVzIRnWJ7ebELROJKv1W+BV6K
Av07fYpo8ttwL2lb0Dl4v6trLb5ZyoKC45IxCKRjtdHsWAwLOceXKeYO61n7VsduvuNF
KEfXdgBfG7Tpf2cIO04zBB140Z/7nUhUlrF/gQRoGHTKtlEAtStxUNN1hvXbrQBL6oRD
DjkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698935918; x=1699540718;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=5pszKKjxXCH/jBp+kILmOGqR+eePvBA7dFgF6MTnviY=;
b=gmpRW/vwhh7SVFSVb1V6cTbtY6byn9xQdNOUIaX1p/wPQsKbuIGseg8EKHuhk8JZKN
CE5ao9MOkuZ1ANojJ+RjwvuxEUDbYU6R9xBUQF6/yFFuy/jmu0lsrwG6/txyKVWICaNo
V9IZK2p/ZbIQKYQM4n7VddjmmjbBSK8bmWuM5Qu3e/ZV6Y7YzEoDHRcHFqsTo2HTy0xW
glbjxFyRvtGHRLWoTrIf8zI6bN4et/5Uf1Y+rXHInv0BaBq7HuhVwy37KD9XI9c6pmBd
ec9G2ziv2eBWMDhR2jjZv7iaf1iazi9YOrobCJcPPM+yFOjD1jqZf+H2QZqWJWUK730z
n2zQ==
X-Gm-Message-State: AOJu0YydLH1v/lD5lGFhFVYulCDKc/1NMegIGAQAyyIZJeWr9kVJA+yT
X57chhfSnq2p05DXxwo1vAs35zymygh9qF9hd7qgR10g
X-Google-Smtp-Source: AGHT+IEAxSXquBep1iU5OSYM4gPBG4HtGqy5tghGm4RauMpBJB57yUtjN0PlK6AeaG5n7nSFQtkJnw==
X-Received: by 2002:aca:b05:0:b0:3af:e67d:8295 with SMTP id 5-20020aca0b05000000b003afe67d8295mr20625607oil.40.1698935918274;
Thu, 02 Nov 2023 07:38:38 -0700 (PDT)
Received: from 234.sub-174-202-226.myvzw.com (167.sub-174-203-3.myvzw.com. [174.203.3.167])
by smtp.gmail.com with ESMTPSA id 22-20020aca2116000000b003af642cf646sm554048oiz.37.2023.11.02.07.38.36
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 02 Nov 2023 07:38:37 -0700 (PDT)
Message-ID: <6543b46d.ca0a0220.bd396.591c@mx.google.com>
From: "Wesley G McCorkle"
Subject: Notification of Renewal Process: Detailed E-Statement SOS - YXLX3T -
BAM
To: "doctor"
Content-Type: multipart/alternative; boundary="9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb"
MIME-Version: 1.0
Date: Thu, 2 Nov 2023 07:38:37 -0700
X-Antivirus: AVG (VPS 231102-0, 11/1/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear DOCTOR@DOCTOR.NL2K.AB.CA
The seamless renewal of your antivirus subscription ensures ongoing cy=
bersecurity.Wishing you strength and determination.
=F0=9F=93=85 Invoice Date & Time: 11/2/2023, 7:38:35 AM
=F0=9F=94=A2 Invoice ID: NQN - R312NTV - NOQ
=F0=9F=93=A6 Your Renewed Subscription:
Service : Advanced Threat Prevention by Avast
Total Amount: $997.97
=F0=9F=92=B0 Payment Status: Successfully processed RND_auto dbeit con=
sent
Your clarity and understanding are essential to us. Please =
reach out if you have any questions.
For a comprehensive understanding of your transaction, we're here to g=
uide. +1 (888) 383- (9757)=20
Maintaining your digital security is our top concern, promising a rew=
arding McAfee experience.
=20
Warm regards,
Wesley G McCorkle
Customer Experience Specialist
=20
=C2=A9 2023 McAfee, Inc. All rights reserved.=20
For your convenience, this email doesn't require a reply. =20
--9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
cale=3D1.0">
Your Subscription Renewal Confirmation
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Nov 2023 10:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qyaOO-000OdN-2m
for dave@doctor.nl2k.ab.ca;
Thu, 02 Nov 2023 10:18:00 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Nov 2023 10:18:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f196.google.com ([209.85.167.196]:47230)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qyYsF-000KXs-0E
for doctor@doctor.nl2k.ab.ca;
Thu, 02 Nov 2023 08:40:46 -0600
Received: by mail-oi1-f196.google.com with SMTP id 5614622812f47-3b565e35fedso569305b6e.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698935918; x=1699540718; darn=doctor.nl2k.ab.ca;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=5pszKKjxXCH/jBp+kILmOGqR+eePvBA7dFgF6MTnviY=;
b=LElukVcQZAtERtyrBODMdQxKmGUPGkZllCstaUNK7ZZIUAPLc16sCeWT9e1SundmVO
O7Uwbwab7Zvxyb/aNpifMxtC0/Q8W6eldxPV9lt4TuZR3dwpxgKVVktOB25Rku+wNBH0
FcthOYasTFgLKX08mS0cPVyvDQp3pTD9Ejv4+uui7QCVVzIRnWJ7ebELROJKv1W+BV6K
Av07fYpo8ttwL2lb0Dl4v6trLb5ZyoKC45IxCKRjtdHsWAwLOceXKeYO61n7VsduvuNF
KEfXdgBfG7Tpf2cIO04zBB140Z/7nUhUlrF/gQRoGHTKtlEAtStxUNN1hvXbrQBL6oRD
DjkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698935918; x=1699540718;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=5pszKKjxXCH/jBp+kILmOGqR+eePvBA7dFgF6MTnviY=;
b=gmpRW/vwhh7SVFSVb1V6cTbtY6byn9xQdNOUIaX1p/wPQsKbuIGseg8EKHuhk8JZKN
CE5ao9MOkuZ1ANojJ+RjwvuxEUDbYU6R9xBUQF6/yFFuy/jmu0lsrwG6/txyKVWICaNo
V9IZK2p/ZbIQKYQM4n7VddjmmjbBSK8bmWuM5Qu3e/ZV6Y7YzEoDHRcHFqsTo2HTy0xW
glbjxFyRvtGHRLWoTrIf8zI6bN4et/5Uf1Y+rXHInv0BaBq7HuhVwy37KD9XI9c6pmBd
ec9G2ziv2eBWMDhR2jjZv7iaf1iazi9YOrobCJcPPM+yFOjD1jqZf+H2QZqWJWUK730z
n2zQ==
X-Gm-Message-State: AOJu0YydLH1v/lD5lGFhFVYulCDKc/1NMegIGAQAyyIZJeWr9kVJA+yT
X57chhfSnq2p05DXxwo1vAs35zymygh9qF9hd7qgR10g
X-Google-Smtp-Source: AGHT+IEAxSXquBep1iU5OSYM4gPBG4HtGqy5tghGm4RauMpBJB57yUtjN0PlK6AeaG5n7nSFQtkJnw==
X-Received: by 2002:aca:b05:0:b0:3af:e67d:8295 with SMTP id 5-20020aca0b05000000b003afe67d8295mr20625607oil.40.1698935918274;
Thu, 02 Nov 2023 07:38:38 -0700 (PDT)
Received: from 234.sub-174-202-226.myvzw.com (167.sub-174-203-3.myvzw.com. [174.203.3.167])
by smtp.gmail.com with ESMTPSA id 22-20020aca2116000000b003af642cf646sm554048oiz.37.2023.11.02.07.38.36
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 02 Nov 2023 07:38:37 -0700 (PDT)
Message-ID: <6543b46d.ca0a0220.bd396.591c@mx.google.com>
From: "Wesley G McCorkle"
Subject: Notification of Renewal Process: Detailed E-Statement SOS - YXLX3T -
BAM
To: "doctor"
Content-Type: multipart/alternative; boundary="9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb"
MIME-Version: 1.0
Date: Thu, 2 Nov 2023 07:38:37 -0700
X-Antivirus: AVG (VPS 231102-0, 11/1/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear DOCTOR@DOCTOR.NL2K.AB.CA
The seamless renewal of your antivirus subscription ensures ongoing cy=
bersecurity.Wishing you strength and determination.
=F0=9F=93=85 Invoice Date & Time: 11/2/2023, 7:38:35 AM
=F0=9F=94=A2 Invoice ID: NQN - R312NTV - NOQ
=F0=9F=93=A6 Your Renewed Subscription:
Service : Advanced Threat Prevention by Avast
Total Amount: $997.97
=F0=9F=92=B0 Payment Status: Successfully processed RND_auto dbeit con=
sent
Your clarity and understanding are essential to us. Please =
reach out if you have any questions.
For a comprehensive understanding of your transaction, we're here to g=
uide. +1 (888) 383- (9757)=20
Maintaining your digital security is our top concern, promising a rew=
arding McAfee experience.
=20
Warm regards,
Wesley G McCorkle
Customer Experience Specialist
=20
=C2=A9 2023 McAfee, Inc. All rights reserved.=20
For your convenience, this email doesn't require a reply. =20
--9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
cale=3D1.0">
=
Dear DOCTOR@DOCTOR.NL2K.AB.CA
ntent">
=
Dear DOCTOR@DOCTOR.NL2K.AB.CA
ntent">
Your Antivirus Software Subscription RenewedWe appreciate y=
our trust in McAfee's protective services.
=
=F0=9F=93=85 Invoice Date &a=
mp; Time: 11/2/2023, 7:38:36 AM
=F0=9F=94=A2 Invoice ID:
an> XZX - H3YQ0D - EKY
=F0=9F=93=A6 Your Renewed Su=
bscription:
- Service : Maximum Guard Digital Solution
ng> - Total Amount: $486.86
=F0=9F=92=B0 Payment Status:=
Successfully processed {Pre-validated Auto Payment Consent}
>
Need insi=
ghts or notice something off? Please inform us. We're committed to ens=
uring your confidence.
In case this doesn't resonate with your needs, our expert t=
eam is here to help. +1 (888)
g>
We are devoted to ensuring the security of your =
digital presence, providing a smooth and rewarding McAfee experience.<=
/p>
Warm regards,
Wesley G =
McCorkle
Customer =
Integration Team
--9STTCy4FTNY=_JDveKxrspiCsPoHAzXHdb--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments