Domain name selling phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 06 Mar 2024 09:36:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rhuEl-00000000Kfe-3Ae7
for dave@doctor.nl2k.ab.ca;
Wed, 06 Mar 2024 09:35:23 -0700
Resent-From: The Doctor
Resent-Date: Wed, 6 Mar 2024 09:35:23 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f43.google.com ([209.85.160.43]:48486)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rhtFS-000000009ew-3a2E
for sales@nk.ca;
Wed, 06 Mar 2024 08:32:06 -0700
Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-21fa6e04835so2657515fac.1
for; Wed, 06 Mar 2024 07:30:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709739001; x=1710343801; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=SWCF66jjrH6eiv1IHpe2QtBWtes5yuBdkueYSutvx+k=;
b=WMfAXpAiaNugNAsy8ZxifuD32eMOD7Hg7Nlpu95iihUWziuc/uhIZ0XIsGKi+YCxV1
CFoAJiJr/mQrc4hYsT/SI23cxIoMOBynGHTelYOlR771qmOFl5HJZ0UpFHBf1lYZohuo
08IoMKvVyhBPxNnFENuHeEYef4IRjds18kBaKGnAeniV/xVbrfW7a1N/TGmbtardQVT0
3+nQ0bFk57SoaO11TTGIZa3B6FYdY+B/HcKXnCaNawWwS/1gFyTOizpj49ZK0hycEBJ9
V5LoMzdcq2/i2R7GOEki/qei+A+quS9hoRKuQplXk3YDf6xuLzwFP2GZnrSjb68+4Uq0
6Mow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709739001; x=1710343801;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=SWCF66jjrH6eiv1IHpe2QtBWtes5yuBdkueYSutvx+k=;
b=JiDlLK6UU3rQ9G4a0dyzMC356WIZbA7scuLiLBu3wWLFPD0iDud1QDjvin5d6iOB1P
DZL4tiugZxkXFuJD4XvmgKe5zd4/kM8MLvU38GyKT1/rNhZTRn6IXW41snnj0h6V0vUj
SJwuXql6CEdD7gZbQ5cBEnOa/o/p6ZK0TOAbHWoSDloEB1rI+vw7/ov8RMIRW8u6EoSa
kzu7vWR8DQMOYz3aAx/trGHwffIn/iYgarMis+IeB0EoAacSf9Az1KvW3JkrjeD8tNMw
RsPabibEl8fE1Fn6oKxTW1ByqySH+HJj7injnJkEklPTf3qBs4nm7zkAOR1Zpi2YTVSU
GILw==
X-Gm-Message-State: AOJu0Yw/xVDA2NotfAtfV/LW2r9QDOUiu9DhJCtVWazubTUdgCR82f/c
/LUODm834dne2lP+45CmEfhtT/9XEip+xMWAjNEyIm8G1GyVdN6C9DSd4HuF2IgXiskMiMeLBLm
w4loQHyHbqG5dkbD4E8EkOQ6O96BHSI1lpXE=
X-Google-Smtp-Source: AGHT+IECEzCwZfjhGpTFStlBI5FYP71pz9mKlgencS+cFEn/0bVfViN878Nfym1qcSA02j3OumXUkMdA32yaADcwq1A=
X-Received: by 2002:a17:90a:5d81:b0:29b:6f3f:c013 with SMTP id
t1-20020a17090a5d8100b0029b6f3fc013mr3840506pji.48.1709738570351; Wed, 06 Mar
2024 07:22:50 -0800 (PST)
Received: from 326440123436 named unknown by gmailapi.google.com with
HTTPREST; Wed, 6 Mar 2024 07:22:50 -0800
MIME-Version: 1.0
From: George Pat
X-Streak-Sequence-Data: action-key=acn_B4Iua15S0t40Q2759Q; recipient-key=rcp_B4ItDP_0NOADwKu4hA
Date: Wed, 6 Mar 2024 07:22:50 -0800
Message-ID:
Subject: Alberta Broadband
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="000000000000250b340612ff88fb"
--000000000000250b340612ff88fb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
Leverage on the opportunity to purchase this web domain
www.BroadbandAlberta.com today to expand your online presence and let it
serve as an online marketing tool for you
Purchase instantly for $550
Let me know your thoughts on this
=E1=90=A7
--000000000000250b340612ff88fb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
![3D""]()
=3D"width:0px;max-height:0px;overflow:hidden" src=3D"https://mailfoogae.app=
spot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWwuY29t&type=3Dzerocontent&am=
p;guid=3D43ed490e-b251-46bf-bc2a-79b1d3b879d6">
=3D"1">=E1=90=A7
--000000000000250b340612ff88fb--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 06 Mar 2024 09:36:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rhuEl-00000000Kfe-3Ae7
for dave@doctor.nl2k.ab.ca;
Wed, 06 Mar 2024 09:35:23 -0700
Resent-From: The Doctor
Resent-Date: Wed, 6 Mar 2024 09:35:23 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f43.google.com ([209.85.160.43]:48486)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rhtFS-000000009ew-3a2E
for sales@nk.ca;
Wed, 06 Mar 2024 08:32:06 -0700
Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-21fa6e04835so2657515fac.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709739001; x=1710343801; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=SWCF66jjrH6eiv1IHpe2QtBWtes5yuBdkueYSutvx+k=;
b=WMfAXpAiaNugNAsy8ZxifuD32eMOD7Hg7Nlpu95iihUWziuc/uhIZ0XIsGKi+YCxV1
CFoAJiJr/mQrc4hYsT/SI23cxIoMOBynGHTelYOlR771qmOFl5HJZ0UpFHBf1lYZohuo
08IoMKvVyhBPxNnFENuHeEYef4IRjds18kBaKGnAeniV/xVbrfW7a1N/TGmbtardQVT0
3+nQ0bFk57SoaO11TTGIZa3B6FYdY+B/HcKXnCaNawWwS/1gFyTOizpj49ZK0hycEBJ9
V5LoMzdcq2/i2R7GOEki/qei+A+quS9hoRKuQplXk3YDf6xuLzwFP2GZnrSjb68+4Uq0
6Mow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709739001; x=1710343801;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=SWCF66jjrH6eiv1IHpe2QtBWtes5yuBdkueYSutvx+k=;
b=JiDlLK6UU3rQ9G4a0dyzMC356WIZbA7scuLiLBu3wWLFPD0iDud1QDjvin5d6iOB1P
DZL4tiugZxkXFuJD4XvmgKe5zd4/kM8MLvU38GyKT1/rNhZTRn6IXW41snnj0h6V0vUj
SJwuXql6CEdD7gZbQ5cBEnOa/o/p6ZK0TOAbHWoSDloEB1rI+vw7/ov8RMIRW8u6EoSa
kzu7vWR8DQMOYz3aAx/trGHwffIn/iYgarMis+IeB0EoAacSf9Az1KvW3JkrjeD8tNMw
RsPabibEl8fE1Fn6oKxTW1ByqySH+HJj7injnJkEklPTf3qBs4nm7zkAOR1Zpi2YTVSU
GILw==
X-Gm-Message-State: AOJu0Yw/xVDA2NotfAtfV/LW2r9QDOUiu9DhJCtVWazubTUdgCR82f/c
/LUODm834dne2lP+45CmEfhtT/9XEip+xMWAjNEyIm8G1GyVdN6C9DSd4HuF2IgXiskMiMeLBLm
w4loQHyHbqG5dkbD4E8EkOQ6O96BHSI1lpXE=
X-Google-Smtp-Source: AGHT+IECEzCwZfjhGpTFStlBI5FYP71pz9mKlgencS+cFEn/0bVfViN878Nfym1qcSA02j3OumXUkMdA32yaADcwq1A=
X-Received: by 2002:a17:90a:5d81:b0:29b:6f3f:c013 with SMTP id
t1-20020a17090a5d8100b0029b6f3fc013mr3840506pji.48.1709738570351; Wed, 06 Mar
2024 07:22:50 -0800 (PST)
Received: from 326440123436 named unknown by gmailapi.google.com with
HTTPREST; Wed, 6 Mar 2024 07:22:50 -0800
MIME-Version: 1.0
From: George Pat
X-Streak-Sequence-Data: action-key=acn_B4Iua15S0t40Q2759Q; recipient-key=rcp_B4ItDP_0NOADwKu4hA
Date: Wed, 6 Mar 2024 07:22:50 -0800
Message-ID:
Subject: Alberta Broadband
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="000000000000250b340612ff88fb"
--000000000000250b340612ff88fb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
Leverage on the opportunity to purchase this web domain
www.BroadbandAlberta.com today to expand your online presence and let it
serve as an online marketing tool for you
Purchase instantly for $550
Let me know your thoughts on this
=E1=90=A7
--000000000000250b340612ff88fb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
Leverage on the opportunity to purchase this=
web domain www.BroadbandAlbert=
a.com today to expand your online presence and let it serve as an onlin=
e marketing tool for you
Purchase instantly for $550
Let me =
know your thoughts on this
Leverage on the opportunity to purchase this=
web domain www.BroadbandAlbert=
a.com today to expand your online presence and let it serve as an onlin=
e marketing tool for you
Purchase instantly for $550
Let me =
know your thoughts on this
=3D"width:0px;max-height:0px;overflow:hidden" src=3D"https://mailfoogae.app=
spot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWwuY29t&type=3Dzerocontent&am=
p;guid=3D43ed490e-b251-46bf-bc2a-79b1d3b879d6">
=3D"1">=E1=90=A7
--000000000000250b340612ff88fb--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments