Amazon Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Jan 2024 11:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rMupV-000000003Sr-2aq5
for dave@doctor.nl2k.ab.ca;
Mon, 08 Jan 2024 11:58:33 -0700
Resent-From: The Doctor
Resent-Date: Mon, 8 Jan 2024 11:58:33 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f177.google.com ([209.85.222.177]:51493)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rMrTw-00000000PBr-2AZ2
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Jan 2024 08:24:10 -0700
Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-7831aacdaffso156299685a.3
for; Mon, 08 Jan 2024 07:22:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1704727354; x=1705332154; darn=doctor.nl2k.ab.ca;
h=subject:to:from:mime-version:date:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=nNBKwwQBGb2ju/3VAB+v5ivY8uoFWpJ3dQnMMR6THaM=;
b=f0rmnwr9C1dcOff40AGGcQMFm4XMZrk6VcWnyn3tYWnGKXwgTVdrE0O5A2+MSYiIgO
cvrC0EKpvy92xcACmDH3vuju0iYH9Mcn5+eW54GL2QY0okgrFjBV40Bm8Vu8L/cDSrvi
WG953QxrQXkj2XL8oTu+RZvyguW4CIdXhzp1vYwGyMytV0AUvrhCa9Foj4hmt24kiiQM
hPuHG18L8n1PO0kRCMGSkLf+5T99lhtAXD2Iy0r0ilk+GQxoBI9aYlc+yZ46KGUJqBTA
FYSr6oKopr8PQhqPKbrEtH01AMMRA1rIcaXyRItia7mmi9ZABzUw4sdkB+RavtdGiS3t
SjWQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1704727354; x=1705332154;
h=subject:to:from:mime-version:date:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=nNBKwwQBGb2ju/3VAB+v5ivY8uoFWpJ3dQnMMR6THaM=;
b=m2/7NiGNW23EIzCixri/6gyKx6pXfugEDKVVgPLlGHj3enKRG1kKzAtskudWhohg49
ueu3yM9C3RjXJSV+89OSF559A9vgKuzQvwVFmcKPCT9TjYI1xn7SI0Dh5tWbbO1hROkh
Cw4u/l2cm0jB249M5eISw1vRK0g/yveMM+7E/JPgTmdqjVB+zhyl8Gz5ASP/xQpOKGdT
LVTVa1wl89b+TtvKGtQzzEsEppTGlrpAKCb8mb7AoVgPjzHtddchO9BEip+Ae2IAqUl0
7FlOL82GckBPOyWajuIpYonxOqje4YD1K/OKtYPA6SOp+YDIbn+HfttExYvXTeGIi/p3
Ajag==
X-Gm-Message-State: AOJu0YxH9B+NtfSzQx0luKPcCH1iVAvx9ydNsjI9GW9gfGe9tVwwtnjv
Nu0KhRI6gqu8oMdAfqXbPvIad6hESlaKMczHRSqd+w==
X-Google-Smtp-Source: AGHT+IH0+5YzyvfbXNQKl92mX73lGgAfNxprsI/im6b0X7lwqP9HALFd5Ev2+N7HsXv6bycIItrj+A==
X-Received: by 2002:a05:620a:215b:b0:783:14b5:640c with SMTP id m27-20020a05620a215b00b0078314b5640cmr3682014qkm.29.1704727353255;
Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Received: from [100.125.104.47] ([198.8.85.203])
by smtp.gmail.com with ESMTPSA id de13-20020a05620a370d00b0076efaec147csm2744488qkb.45.2024.01.08.07.22.32
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Message-ID: <659c1339.050a0220.ce82f.a2e2@mx.google.com>
Date: Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Content-Type: multipart/mixed; boundary="===============4701341482574187735=="
MIME-Version: 1.0
From: BTFHJFFGVC
To: doctor@doctor.nl2k.ab.ca
Subject: Thank you for your order confirmation 77111688
--===============4701341482574187735==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
--===============4701341482574187735==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Jan 2024 11:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rMupV-000000003Sr-2aq5
for dave@doctor.nl2k.ab.ca;
Mon, 08 Jan 2024 11:58:33 -0700
Resent-From: The Doctor
Resent-Date: Mon, 8 Jan 2024 11:58:33 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f177.google.com ([209.85.222.177]:51493)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rMrTw-00000000PBr-2AZ2
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Jan 2024 08:24:10 -0700
Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-7831aacdaffso156299685a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1704727354; x=1705332154; darn=doctor.nl2k.ab.ca;
h=subject:to:from:mime-version:date:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=nNBKwwQBGb2ju/3VAB+v5ivY8uoFWpJ3dQnMMR6THaM=;
b=f0rmnwr9C1dcOff40AGGcQMFm4XMZrk6VcWnyn3tYWnGKXwgTVdrE0O5A2+MSYiIgO
cvrC0EKpvy92xcACmDH3vuju0iYH9Mcn5+eW54GL2QY0okgrFjBV40Bm8Vu8L/cDSrvi
WG953QxrQXkj2XL8oTu+RZvyguW4CIdXhzp1vYwGyMytV0AUvrhCa9Foj4hmt24kiiQM
hPuHG18L8n1PO0kRCMGSkLf+5T99lhtAXD2Iy0r0ilk+GQxoBI9aYlc+yZ46KGUJqBTA
FYSr6oKopr8PQhqPKbrEtH01AMMRA1rIcaXyRItia7mmi9ZABzUw4sdkB+RavtdGiS3t
SjWQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1704727354; x=1705332154;
h=subject:to:from:mime-version:date:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=nNBKwwQBGb2ju/3VAB+v5ivY8uoFWpJ3dQnMMR6THaM=;
b=m2/7NiGNW23EIzCixri/6gyKx6pXfugEDKVVgPLlGHj3enKRG1kKzAtskudWhohg49
ueu3yM9C3RjXJSV+89OSF559A9vgKuzQvwVFmcKPCT9TjYI1xn7SI0Dh5tWbbO1hROkh
Cw4u/l2cm0jB249M5eISw1vRK0g/yveMM+7E/JPgTmdqjVB+zhyl8Gz5ASP/xQpOKGdT
LVTVa1wl89b+TtvKGtQzzEsEppTGlrpAKCb8mb7AoVgPjzHtddchO9BEip+Ae2IAqUl0
7FlOL82GckBPOyWajuIpYonxOqje4YD1K/OKtYPA6SOp+YDIbn+HfttExYvXTeGIi/p3
Ajag==
X-Gm-Message-State: AOJu0YxH9B+NtfSzQx0luKPcCH1iVAvx9ydNsjI9GW9gfGe9tVwwtnjv
Nu0KhRI6gqu8oMdAfqXbPvIad6hESlaKMczHRSqd+w==
X-Google-Smtp-Source: AGHT+IH0+5YzyvfbXNQKl92mX73lGgAfNxprsI/im6b0X7lwqP9HALFd5Ev2+N7HsXv6bycIItrj+A==
X-Received: by 2002:a05:620a:215b:b0:783:14b5:640c with SMTP id m27-20020a05620a215b00b0078314b5640cmr3682014qkm.29.1704727353255;
Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Received: from [100.125.104.47] ([198.8.85.203])
by smtp.gmail.com with ESMTPSA id de13-20020a05620a370d00b0076efaec147csm2744488qkb.45.2024.01.08.07.22.32
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Message-ID: <659c1339.050a0220.ce82f.a2e2@mx.google.com>
Date: Mon, 08 Jan 2024 07:22:33 -0800 (PST)
Content-Type: multipart/mixed; boundary="===============4701341482574187735=="
MIME-Version: 1.0
From: BTFHJFFGVC
To: doctor@doctor.nl2k.ab.ca
Subject: Thank you for your order confirmation 77111688
--===============4701341482574187735==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Hello doctor@doctor.nl2k.ab.ca,
A.M.A.Z.O.N
Your online payment was processed successfully.
If you want to make any modifications in the order, reach us at +1-415-234-9054
Item you chosen is Samsung Galaxy SmartPhone i23 is on its way.
Dated – Monday, Jan 8th, 2024
0rder Details -
Item | Total (USD) | 0rder Status |
Samsung Galaxy Smartphone i23 | 339.99 | Approved |
Payment Mode - ONLINE
If you did not authorise this payment, reach our billing department at +1-415-234-9054 to cancel the transaction.
--===============4701341482574187735==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments