Domain name selling phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 Mar 2024 10:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rjiDe-000000009j8-3SoA

for dave@doctor.nl2k.ab.ca;

Mon, 11 Mar 2024 10:09:42 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 Mar 2024 10:09:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f174.google.com ([209.85.222.174]:52617)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rjhy7-000000009H3-3OgC

for sales@nk.ca;

Mon, 11 Mar 2024 09:53:43 -0600

Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-788412a4b78so150829685a.1

for ; Mon, 11 Mar 2024 08:51:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710172296; x=1710777096; darn=nk.ca;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=sFvp9VupG7tZFDtmid2rkpnNZ1O6+dP/3M5SzYE8/LI=;

b=fglqiUP37dteiQK9UsQpzDkWlTc/RGu4GP5k/2oMkuWK4ndnmngZxF81ubET78yRMo

Y0apjbyEELv9D+ZIGbT2EcAlJAjBdyU7Tn5Ve7aI9y2xGi9hc1z6ZzfaX0f09vSb+JXy

3sKvGYqDbkUUGJiMuDmkVB1qw4wfuOE3zL8kZANmPqMy6AodAe22L0NbMaSaUBTOTS6W

jcCSsEcTP76NRDtmu3demvQh9YOJtlyScO5IkNYpYN0wVY9c3C5mvyWw61oYZtCqoQqQ

txxNeVAger5SC1kGstQZXTmuZLwsc1INJ+E9EGIkGrdFtMPuDL9FEg0tDLoSi7y3UNhv

raVg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710172296; x=1710777096;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=sFvp9VupG7tZFDtmid2rkpnNZ1O6+dP/3M5SzYE8/LI=;

b=rjE83ePQVDj6wpd3AtIWqJ9MeLlzcZevqyS97YRveZHP0de+vIJBjAVbpNSBfecWuG

vTK6QbXLdxKmk0nATfWZdnuDAsm3SBI2H8RqYdrRn4OSTwqAcr6AyCTlmej+Hq5rN//p

kVg2k9BKf3dr4v6Uhooi+bCQ9tnrdZFlztuYlwzqPjR+H1xZ9PD7/6yfUwfO3/Baydp5

WVWm/+7QvumKR0IKlaGIMibDcNL5iczWSA+/2943qjoSzJx+WqGUBAUKSADUj4TciXco

HIzO62OHB2u66eChVFhILSXnzkvMwCYFXBj71ezE0IglNKwcA/Kc05yZAJeVx2iwtCsY

74dg==

X-Gm-Message-State: AOJu0YyP4S43Y4nj3aTJCpcmF4wpAVz20fu0TQQ8wwk25hdJRbGcQJAe

LJ/v76e/Vf93XPmeqGCgoJXKbk0v7rOneaD7oAwlippyPzXzOiMfDE+CnZhRYCSpx6vee+XI4BW

Sct46YOxH8dVft9nvGVDbWUzyTAGetgWk7YM=

X-Google-Smtp-Source: AGHT+IHFJ96pJOqMH5BIkefIeOWXX7a/fEZrGhHE99FFhKmKxjNkQ37JC3UyBz51ij+Ejo3no5JZoO9oD75LC03bqXA=

X-Received: by 2002:a17:90b:30ce:b0:29b:ccb4:a250 with SMTP id

hi14-20020a17090b30ce00b0029bccb4a250mr3621741pjb.16.1710170475406; Mon, 11

Mar 2024 08:21:15 -0700 (PDT)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Mon, 11 Mar 2024 08:21:15 -0700

MIME-Version: 1.0

From: George Pat

X-Streak-Sequence-Data: action-key=acn_B4Iua2iqKgwTkPAG8A; recipient-key=rcp_B4ItDP_0NOADwKu4hA

In-Reply-To:

References:

Date: Mon, 11 Mar 2024 08:21:15 -0700

Message-ID:

Subject: Alberta Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b12e5f0613641729"



--000000000000b12e5f0613641729

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello



Hope you're doing well



We're listening to offers on the domain name www.BroadbandAlberta.com



What is your best price of this domain?



Looking forward to hearing from you

On Wed, Mar 6, 2024 at 03:22 PM George Pat wrote:



> Hello

>

> Leverage on the opportunity to purchase this web domain

> www.BroadbandAlberta.com today to expand your online presence and let it

> serve as an online marketing tool for you

>

> Purchase instantly for $550

>

> Let me know your thoughts on this

>

=E1=90=A7



--000000000000b12e5f0613641729

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello

Hope you're doing well

We're l=

istening to offers on the domain name
a.com">www.BroadbandAlberta.com

What is your best price of this =

domain?

Looking forward to hearing from you


On Wed, Ma=

r 6, 2024 at 03:22 PM George Pat <
m">geogepat200@gmail.com> wrote:

_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=

,204);padding-left:1ex">


Hello



Leverage on the opportunity to purchase this web domain
www.BroadbandAlberta.com">www.BroadbandAlberta.com today to expand your=

online presence and let it serve as an online marketing tool for you
<=

br>

Purchase instantly for $550



Let me know your thoughts on this



height:1px">3D""
" src=3D"https://mailfoogae.appspot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWw=

uY29t&type=3Dzerocontent&guid=3D12cee75d-fe61-40e0-8e89-6a744a8e5ea=

a">=E1=90=A7




--000000000000b12e5f0613641729--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA