French language phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Feb 2024 20:24:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1reo44-000000000dR-2U6T
for dave@doctor.nl2k.ab.ca;
Mon, 26 Feb 2024 20:23:32 -0700
Resent-From: The Doctor
Resent-Date: Mon, 26 Feb 2024 20:23:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f175.google.com ([209.85.208.175]:59689)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1reny5-000000000P0-4BPh
for doctor@doctor.nl2k.ab.ca;
Mon, 26 Feb 2024 20:17:25 -0700
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2d27fef509eso31992171fa.3
for; Mon, 26 Feb 2024 19:15:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709003719; x=1709608519; darn=doctor.nl2k.ab.ca;
h=mime-version:list-unsubscribe:date:subject:to:reply-to:from
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;
b=cQURvsc48SzTMSbsTe7aVHQZ8+/oSKqfaKj+QrZgpxr0d9rqL7RwjmxhnVQKCHcV1p
JoROtq5hMOgvtQkdJQcrekeUGz/McmBdhMW5oohEXhjZlS9uNDt4Ko+5wF2cRTh2zzU0
Iw/wQOA3AdPqdojQqkecqbgogPKLns/49rlU9I2tS7D5zHejN0w0b13oJomMzb7iTk0G
KY87Go6z7p/sDLF16Bhqdb11Nmz/t8Myya8DS5Gw63waqHKOiEq8/7qLHuxf34PgLXyv
fee2pruOrHpU3vwabS3KKkCiV4XpnNfcr6nMHb3rr3LOWMRATI5HmrMj+4stSzyAi8ff
9rCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709003719; x=1709608519;
h=mime-version:list-unsubscribe:date:subject:to:reply-to:from
:message-id:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;
b=S2PtpbF8AWvIPTqb6bORX+HfzrnxMqntZRy+PPJBkH/S/ebNaJU+pvszG+nMNC+VBZ
7AY66dSux8KEzDaupYhus+qnU97a3L7yKehGdalY9Xdjejg2tqxo6+d9SEAzd4Ef9WPU
01G9YiZUli6odeeYm7+/jEWmvX5nVgyZ2kJOBihQjyk18Lt+RN3yaZx1PorPpSCvQs1d
WzbWdTul7myBTw3nriDDr/r/jauaUanNsuV7bgG0mn/ovktGUACwxkizWLcfpx8PU5sQ
8O3DCnV1crpdKu//It8mGr2MnZKEXkiXGNJD2Q9CjNe/wXk2pdAnvm4JaEspC8BY1zb5
JI3g==
X-Gm-Message-State: AOJu0YyJVB+omH6GHXkZCABt9xbtAk9WXoDx4KQXVV27X5yfJVaqkEdQ
Uj0+ci572aTJMfeeRZH0rMZYzjkqMJT/HE4Et+Ld1DZaF5/yKURdFvSI/yyG
X-Google-Smtp-Source: AGHT+IEZpnA6ctxeqZW1d9b0ulUeT+MmYvvq6owcH+eki0kIVWd0H5/I2v0B/DIomqh102A4EEdrSA==
X-Received: by 2002:a17:906:6dcf:b0:a3e:b3e6:5b71 with SMTP id j15-20020a1709066dcf00b00a3eb3e65b71mr5814816ejt.62.1709003249165;
Mon, 26 Feb 2024 19:07:29 -0800 (PST)
Received: from PC-PC ([156.0.212.34])
by smtp.gmail.com with ESMTPSA id qu25-20020a170907111900b00a434cae86ebsm307894ejb.219.2024.02.26.19.07.28
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 26 Feb 2024 19:07:28 -0800 (PST)
Message-ID: <65dd51f0.170a0220.64e37.171e@mx.google.com>
From: =?utf-8?B?Q2xvdmlzIEVUU09VQkFSSQ==?=
Reply-To: clovis025@outlook.fr
To: doctor@doctor.nl2k.ab.ca
Subject: =?utf-8?B?bWVyY2kgZGUgbWUgZmFpcmUgc2F2b2ly?=
Date: Tue, 27 Feb 2024 04:07:25 +0100
List-Unsubscribe:
X-Priority: 3
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="CE57E4C23768465AB9A7902270A0D128"
X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message
X-Antivirus-Status: Clean
--CE57E4C23768465AB9A7902270A0D128
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=208.00.7601.17514">=0D=0A=0D=0A
"WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20BACKGROUND-COLOR:=20rgb(255,255,2=
55);=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20DISPLAY:=20inline=20!i=
mportant;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=20=
2;=20FLOAT:=20none;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110)=
;=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-=
variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-=
stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-=
color:=20initial">Bonjour doctor@doctor.nl2k.ab.ca,=0D=0A=
=0D=0A
TEXT-TRANSFORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MAR=
GIN:=200px;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=
=20normal;=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,1=
03,110);=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20=
font-variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-=
text-stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decora=
tion-color:=20initial">Je=20cherche=20un=20porteur=20de=20projets=20qui=20p=
eut=20m'aider=20=C3=A0=20investir=20mon=20argent=20dans=20des=20bons=20proj=
ets=20tels=20que=20:=20l'industrie,=20l'immobilier,=20l'h=C3=B4tellerie,=20=
la=20restauration,=20l'agriculture,=20l'=C3=A9levage,=20la=20pisciculture,=20=
la=20p=C3=AAche.=20Si=20vous=20avez=20des=20projets=20et=20que=20vous=20che=
rchez=20un=20investisseur,=20merci=20de=20me=20faire=20savoir.=0D=0A
style=3D"PADDING-BOTTOM:=200px;=20WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20=
FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px;=20MIN-HEIGHT:=20=
10px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=202;=20=
LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20FONT-SIZE:=2017px;=
=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-variant-ligatures:=20n=
ormal;=20font-variant-caps:=20normal;=20-webkit-text-stroke-width:=200px;=20=
text-decoration-style:=20initial;=20text-decoration-color:=20initial">Clovi=
s=0D=0A
FORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px=
;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=
=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20=
FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-vari=
ant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-stro=
ke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-colo=
r:=20initial">doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doct=
or.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,=
--CE57E4C23768465AB9A7902270A0D128--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Feb 2024 20:24:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1reo44-000000000dR-2U6T
for dave@doctor.nl2k.ab.ca;
Mon, 26 Feb 2024 20:23:32 -0700
Resent-From: The Doctor
Resent-Date: Mon, 26 Feb 2024 20:23:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f175.google.com ([209.85.208.175]:59689)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1reny5-000000000P0-4BPh
for doctor@doctor.nl2k.ab.ca;
Mon, 26 Feb 2024 20:17:25 -0700
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2d27fef509eso31992171fa.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709003719; x=1709608519; darn=doctor.nl2k.ab.ca;
h=mime-version:list-unsubscribe:date:subject:to:reply-to:from
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;
b=cQURvsc48SzTMSbsTe7aVHQZ8+/oSKqfaKj+QrZgpxr0d9rqL7RwjmxhnVQKCHcV1p
JoROtq5hMOgvtQkdJQcrekeUGz/McmBdhMW5oohEXhjZlS9uNDt4Ko+5wF2cRTh2zzU0
Iw/wQOA3AdPqdojQqkecqbgogPKLns/49rlU9I2tS7D5zHejN0w0b13oJomMzb7iTk0G
KY87Go6z7p/sDLF16Bhqdb11Nmz/t8Myya8DS5Gw63waqHKOiEq8/7qLHuxf34PgLXyv
fee2pruOrHpU3vwabS3KKkCiV4XpnNfcr6nMHb3rr3LOWMRATI5HmrMj+4stSzyAi8ff
9rCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709003719; x=1709608519;
h=mime-version:list-unsubscribe:date:subject:to:reply-to:from
:message-id:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;
b=S2PtpbF8AWvIPTqb6bORX+HfzrnxMqntZRy+PPJBkH/S/ebNaJU+pvszG+nMNC+VBZ
7AY66dSux8KEzDaupYhus+qnU97a3L7yKehGdalY9Xdjejg2tqxo6+d9SEAzd4Ef9WPU
01G9YiZUli6odeeYm7+/jEWmvX5nVgyZ2kJOBihQjyk18Lt+RN3yaZx1PorPpSCvQs1d
WzbWdTul7myBTw3nriDDr/r/jauaUanNsuV7bgG0mn/ovktGUACwxkizWLcfpx8PU5sQ
8O3DCnV1crpdKu//It8mGr2MnZKEXkiXGNJD2Q9CjNe/wXk2pdAnvm4JaEspC8BY1zb5
JI3g==
X-Gm-Message-State: AOJu0YyJVB+omH6GHXkZCABt9xbtAk9WXoDx4KQXVV27X5yfJVaqkEdQ
Uj0+ci572aTJMfeeRZH0rMZYzjkqMJT/HE4Et+Ld1DZaF5/yKURdFvSI/yyG
X-Google-Smtp-Source: AGHT+IEZpnA6ctxeqZW1d9b0ulUeT+MmYvvq6owcH+eki0kIVWd0H5/I2v0B/DIomqh102A4EEdrSA==
X-Received: by 2002:a17:906:6dcf:b0:a3e:b3e6:5b71 with SMTP id j15-20020a1709066dcf00b00a3eb3e65b71mr5814816ejt.62.1709003249165;
Mon, 26 Feb 2024 19:07:29 -0800 (PST)
Received: from PC-PC ([156.0.212.34])
by smtp.gmail.com with ESMTPSA id qu25-20020a170907111900b00a434cae86ebsm307894ejb.219.2024.02.26.19.07.28
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 26 Feb 2024 19:07:28 -0800 (PST)
Message-ID: <65dd51f0.170a0220.64e37.171e@mx.google.com>
From: =?utf-8?B?Q2xvdmlzIEVUU09VQkFSSQ==?=
Reply-To: clovis025@outlook.fr
To: doctor@doctor.nl2k.ab.ca
Subject: =?utf-8?B?bWVyY2kgZGUgbWUgZmFpcmUgc2F2b2ly?=
Date: Tue, 27 Feb 2024 04:07:25 +0100
List-Unsubscribe:
X-Priority: 3
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="CE57E4C23768465AB9A7902270A0D128"
X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message
X-Antivirus-Status: Clean
--CE57E4C23768465AB9A7902270A0D128
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=208.00.7601.17514">=0D=0A=0D=0A
"WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20BACKGROUND-COLOR:=20rgb(255,255,2=
55);=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20DISPLAY:=20inline=20!i=
mportant;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=20=
2;=20FLOAT:=20none;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110)=
;=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-=
variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-=
stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-=
color:=20initial">Bonjour doctor@doctor.nl2k.ab.ca,
TEXT-TRANSFORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MAR=
GIN:=200px;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=
=20normal;=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,1=
03,110);=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20=
font-variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-=
text-stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decora=
tion-color:=20initial">Je=20cherche=20un=20porteur=20de=20projets=20qui=20p=
eut=20m'aider=20=C3=A0=20investir=20mon=20argent=20dans=20des=20bons=20proj=
ets=20tels=20que=20:=20l'industrie,=20l'immobilier,=20l'h=C3=B4tellerie,=20=
la=20restauration,=20l'agriculture,=20l'=C3=A9levage,=20la=20pisciculture,=20=
la=20p=C3=AAche.=20Si=20vous=20avez=20des=20projets=20et=20que=20vous=20che=
rchez=20un=20investisseur,=20merci=20de=20me=20faire=20savoir.=0D=0A
style=3D"PADDING-BOTTOM:=200px;=20WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20=
FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px;=20MIN-HEIGHT:=20=
10px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=202;=20=
LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20FONT-SIZE:=2017px;=
=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-variant-ligatures:=20n=
ormal;=20font-variant-caps:=20normal;=20-webkit-text-stroke-width:=200px;=20=
text-decoration-style:=20initial;=20text-decoration-color:=20initial">Clovi=
s=0D=0A
FORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px=
;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=
=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20=
FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-vari=
ant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-stro=
ke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-colo=
r:=20initial">doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doct=
or.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,=
--CE57E4C23768465AB9A7902270A0D128--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments