McAfee Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 Mar 2024 09:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ricg2-00000000PPM-4AGP

for dave@doctor.nl2k.ab.ca;

Fri, 08 Mar 2024 09:02:30 -0700

Resent-From: The Doctor

Resent-Date: Fri, 8 Mar 2024 09:02:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f50.google.com ([209.85.160.50]:55525)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rib8e-000000005Iw-0OFV

for doctor@doctor.nl2k.ab.ca;

Fri, 08 Mar 2024 07:23:59 -0700

Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-2204e9290f9so829877fac.2

for ; Fri, 08 Mar 2024 06:22:01 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709907715; x=1710512515; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=G9Lhte97hRwJnGA83/XZST3/PCp0VoXeU4/HM4EvNrc=;

b=eziXuXTi2luMkfGg/x+x2yXYHwPtwQT80ujhZoouLjJzcbOKdRhSqFKP/bNUs6vPmN

et9nUnXJs1WhXnX7E2EC0JZ/jSdBwwFeCLGtJzGRDZ8rN9r7LE580dpwp7dE+3roeroE

pR4YUPcPZWWxw/X7OXA0hr/jD5OlDACV9SfDNT5F/3qnAAg9i6/8IELqhEltUAQKH0fJ

tB8HLaveehqDUbpo+MudVu+CwFHRLrJBntFI+t5Usgc2BmCnxFxVM4AsCGelDPHb7bMX

T+yrwn2iMR/dC4EfVVZHDeGAVsQeGgWKeNw+2BvvTy34LcYbtih+cmLwXP2OfFJLADgF

eNog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709907715; x=1710512515;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=G9Lhte97hRwJnGA83/XZST3/PCp0VoXeU4/HM4EvNrc=;

b=qXvjx/UutAo/IeI9IdIJ1rGrvVhiAMrBwlXb8DF7F2egbKBchILwvaNxjqjvAwHEq6

18fOZ9EBHR9qKA8YlWXPZLFgpG+KP1kl9ayQQU7wxA5AQT1zqMIqSxyjSzZOhye3bEGC

Ia2B0uEQ4/p+/UshqnhT/tZQmK/v56dZauFd4aIO92dfeZ9wWETuuudDMCTQzcuiyXac

3I8MhtLjmT7HSYO5hPNrYyxEk9Y4t6c3KzPC7pNZjmU654mQyWB1t/n3AmAp7vOy29Uk

QxX/iWU8ziIqLBW/ewI+Fgs5YANCHEscj8sQA9a6tUMpR/3H1Mxlby/XnmVDiarIh29y

l/Tw==

X-Gm-Message-State: AOJu0YxuIQQXmp7OJbJ0TtQYN14tvSw1d+7fRzXk4UCzgJobntftg9EH

7rfp3wac0KAnwCG3y4Py9kislai0ccBVABHdvbVyka6A3ZF+MCljYGDsn669CLN+

X-Google-Smtp-Source: AGHT+IF3mY0Kc/wD+wEynLJMcErVPTYhA4s9OP17YaJ5l9vmsM/YSVwG10Cf58gkQV9oGLa13Yeo8A==

X-Received: by 2002:a05:6a20:e608:b0:1a1:3000:ab67 with SMTP id my8-20020a056a20e60800b001a13000ab67mr13310398pzb.46.1709907260507;

Fri, 08 Mar 2024 06:14:20 -0800 (PST)

Received: from [10.203.0.119] ([43.133.167.23])

by smtp.gmail.com with ESMTPSA id gm21-20020a17090b101500b0029ba93dc3f5sm1579659pjb.2.2024.03.08.06.14.19

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 08 Mar 2024 06:14:19 -0800 (PST)

Message-ID: <65eb1d3b.170a0220.95b8d.5e54@mx.google.com>

Date: Fri, 08 Mar 2024 06:14:19 -0800 (PST)

Content-Type: multipart/mixed; boundary="===============6568228339852007688=="

MIME-Version: 1.0

Subject: Invoice Due Soon RH636021NH

From: Lindsey Brown

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: QQMail 2.x

List-Unsubscribe:

List-Owner:

List-ID: nkemdirimonu@gmail.com

List-Subscribe: nkemdirimonu@gmail.com

List-Post:

X-Antivirus: AVG (VPS 240308-0, 3/7/2024), Inbound message

X-Antivirus-Status: Clean



--===============6568228339852007688==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAwOCwgMjAyNDxicj4KPGJyPgpXZSBjb25maXJtIHRoZSBvZmZp

Y2lhbCBjb25maXJtYXRpb24gb2YgeW91ciBwcm9jZXNzZWQgdHJhbnNhY3Rpb24gdGhyb3VnaCA8

Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgUHJvdGVjdGlvbjwvYj4u

PGJyPiBXZSBjb25maXJtIHRoZSBzdWNjZXNzZnVsIHByb2Nlc3NpbmcgYW5kIHJlY2VpcHQgb2Yg

eW91ciAmIzgwOyYjOTc7JiMxMjE7JiMxMDk7JiMxMDE7JiMxMTA7JiMxMTY7IG9mIDxiPiYjMzY7

NDI1LjI1PC9iPiBmb3IgPGI+JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IFRvdGFs

IFByb3RlY3Rpb248L2I+Ljxicj5JZiBmdXJ0aGVyIGNsYXJpZmljYXRpb24gb3IgYWRkaXRpb25h

bCBkZXRhaWxzIGFib3V0IHRoaXMgdHJhbnNhY3Rpb24gYXJlIG5lZWRlZCwgcGxlYXNlIGNvbnRh

Y3QgdXMgYXQgeW91ciBlYXJsaWVzdCBjb252ZW5pZW5jZS48YnI+SWYgeW91IG5lZWQgaGVscCwg

Y29udGFjdCBvdXIgY3VzdG9tZXIgc2VydmljZSB0ZWFtIGF0IDxiPismIzQ5OygmIzU2OzMmIzQ5

OykyJiM1NjsmIzU2Oy0mIzQ5OzcmIzU2OyYjNDk7PC9iPiB3aXRoaW4gdGhlIG5leHQgc2l4IGhv

dXJzLgo8YnI+Cjxicj4KPGJyPgpXZSBnZW51aW5lbHkgYXBwcmVjaWF0ZSB5b3VyIGRlY2lzaW9u

IHRvIGNob29zZSA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgUHJv

dGVjdGlvbjwvYj4sIGFuZCB3ZSBoaWdobHkgdmFsdWUgdGhlIHRydXN0IHlvdSd2ZSBwbGFjZWQg

aW4gb3VyIHNlY3VyaXR5IG1lYXN1cmVzLjxicj4KPGJyPgo8YnI+CjxiPllvdXIgJiM3MzsmIzEx

MDsmIzExODsmIzExMTsmIzEwNTsmIzk5OyYjMTAxOyBEZXRhaWxzPC9iPgo8YnI+CkNsaWVudDog

ZG9jdG9yPGJyPgpPcmRlcmVkIEl0ZW06ICYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAx

OyBUb3RhbCBQcm90ZWN0aW9uPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+

CkFjdGl2YXRpb24gS2V5OiBaUTg5MDBDVzxicj4KPGJyPgpXYXJtIHJlZ2FyZHMsPGJyPgomIzc3

OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgUHJvdGVjdGlvbjxicj4KNDk1OCBC

cmV3IENyZWVrIFJkIFNlY2hlbHQgQnJpdGlzaCBDb2x1bWJpYSBDYW5hZGE8YnI+CkZvciBpbnF1

aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPismIzQ5OygmIzU2OzMmIzQ5OykyJiM1Njsm

IzU2Oy0mIzQ5OzcmIzU2OyYjNDk7PC9iPi4=



--===============6568228339852007688==--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA