McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 12 Mar 2024 11:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rk6GZ-00000000OW7-0ajR
for dave@doctor.nl2k.ab.ca;
Tue, 12 Mar 2024 11:50:19 -0600
Resent-From: The Doctor
Resent-Date: Tue, 12 Mar 2024 11:50:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f48.google.com ([209.85.128.48]:45538)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rk3go-00000000NE1-3UQr
for doctor@doctor.nl2k.ab.ca;
Tue, 12 Mar 2024 09:05:18 -0600
Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-41329a665a8so344575e9.3
for; Tue, 12 Mar 2024 08:03:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710255792; x=1710860592; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=Ljt38CoaWr48WeGDLh+1BRvlv9lkpWJKg3OlcjVWRLs=;
b=A5Msar89PEKFI7CMCW3ndK0uo/HyAKx8JH1Oz79eV4T94adjQz/CViSEkrGqaDzIcs
TBMsbUY8+FhJhqMq84wlO0UlMWK4225uAyuqoAP1tWDmIIHXEjKI3/oDUSWhPdsJBu0d
HuA37Qqf7fdGkP7kIv1YcMbdxA/pIwfO8R/Co0Gmb05SV2jzQ3nUVOu3B8nlCzk+kV7N
oFUUUc1Bh7VW7cgG5AzHpCqXVFFUNKBfVGWUmy542JQnT1iPZy/o657nVOQXjVAQHQmX
fOQhj5miy/lVr4kqWOi6ZQgQV7ThBCdgZ+oHT+Br383jgrniDkm7g3fHrAsae/8F73aY
mcHA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710255792; x=1710860592;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=Ljt38CoaWr48WeGDLh+1BRvlv9lkpWJKg3OlcjVWRLs=;
b=xR1wpyYVmfTPo+7AKXJ6pmRyjY4gA3dX6NfB5VWuZ4DzQVdBKf2cn62zFjRoLgXj6X
4iOAjQ8Wf8MexaXxfWZWmU3HgIXdq4d6u2Gwm76lBycf6gHvIZ4v2ovddNo+wXSYz+Ly
g6DuovHXobtuM49/dLPLu+Mm5SU/Uqfq8r3hkrDHRGqykK0MQwKRzYkq7EAzAPre6mvv
526tDlOJiEFM7NJpTSyw2GOsm+eIXEp19N8+WGJFeuHqFIotZ5mtYuCtpoQY2aw7Jabe
3CvIC5IqlL1U9UBPYRLI2BTTEbP1iR7igz3tNEkQUXfQ4dJq4bVluWXap4VBcbOLLB9T
pJFQ==
X-Gm-Message-State: AOJu0YwdqMulQh5aB7YpduteVkvRUZeI6CxKmrj6liCeiwx3qNTNrxu+
F1P5WgRP0Rxqk1PKh3wxMEyHQampmXj6yr6aH8b9VOYmivbRg68izFA04o7+1xk=
X-Google-Smtp-Source: AGHT+IFxLhv1nUWLtxiwcBpGvfq/C1aXJI0ozRjlvJSj6R7IGfQLNlcORFzWwZemYNAZsoBewJ597A==
X-Received: by 2002:a05:600c:4e90:b0:413:2308:7d94 with SMTP id f16-20020a05600c4e9000b0041323087d94mr3002064wmq.20.1710255792337;
Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Received: from [172.28.0.62] ([43.157.82.69])
by smtp.gmail.com with ESMTPSA id q8-20020a05600c46c800b00412d60cb914sm19392540wmo.5.2024.03.12.08.03.12
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Message-ID: <65f06eb0.050a0220.4f155.1abd@mx.google.com>
Date: Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0189943787315782554=="
MIME-Version: 1.0
Subject: Invoice for order no 32808325
From: Nguyen tran Thu thuy
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: Microsoft CDO for Windows 2000
List-Unsubscribe:
List-Owner:
List-ID: studentarjinaakter10@gmail.com
List-Subscribe: studentarjinaakter10@gmail.com
List-Post:
--===============0189943787315782554==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============0189943787315782554==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 12 Mar 2024 11:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rk6GZ-00000000OW7-0ajR
for dave@doctor.nl2k.ab.ca;
Tue, 12 Mar 2024 11:50:19 -0600
Resent-From: The Doctor
Resent-Date: Tue, 12 Mar 2024 11:50:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f48.google.com ([209.85.128.48]:45538)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rk3go-00000000NE1-3UQr
for doctor@doctor.nl2k.ab.ca;
Tue, 12 Mar 2024 09:05:18 -0600
Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-41329a665a8so344575e9.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710255792; x=1710860592; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=Ljt38CoaWr48WeGDLh+1BRvlv9lkpWJKg3OlcjVWRLs=;
b=A5Msar89PEKFI7CMCW3ndK0uo/HyAKx8JH1Oz79eV4T94adjQz/CViSEkrGqaDzIcs
TBMsbUY8+FhJhqMq84wlO0UlMWK4225uAyuqoAP1tWDmIIHXEjKI3/oDUSWhPdsJBu0d
HuA37Qqf7fdGkP7kIv1YcMbdxA/pIwfO8R/Co0Gmb05SV2jzQ3nUVOu3B8nlCzk+kV7N
oFUUUc1Bh7VW7cgG5AzHpCqXVFFUNKBfVGWUmy542JQnT1iPZy/o657nVOQXjVAQHQmX
fOQhj5miy/lVr4kqWOi6ZQgQV7ThBCdgZ+oHT+Br383jgrniDkm7g3fHrAsae/8F73aY
mcHA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710255792; x=1710860592;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=Ljt38CoaWr48WeGDLh+1BRvlv9lkpWJKg3OlcjVWRLs=;
b=xR1wpyYVmfTPo+7AKXJ6pmRyjY4gA3dX6NfB5VWuZ4DzQVdBKf2cn62zFjRoLgXj6X
4iOAjQ8Wf8MexaXxfWZWmU3HgIXdq4d6u2Gwm76lBycf6gHvIZ4v2ovddNo+wXSYz+Ly
g6DuovHXobtuM49/dLPLu+Mm5SU/Uqfq8r3hkrDHRGqykK0MQwKRzYkq7EAzAPre6mvv
526tDlOJiEFM7NJpTSyw2GOsm+eIXEp19N8+WGJFeuHqFIotZ5mtYuCtpoQY2aw7Jabe
3CvIC5IqlL1U9UBPYRLI2BTTEbP1iR7igz3tNEkQUXfQ4dJq4bVluWXap4VBcbOLLB9T
pJFQ==
X-Gm-Message-State: AOJu0YwdqMulQh5aB7YpduteVkvRUZeI6CxKmrj6liCeiwx3qNTNrxu+
F1P5WgRP0Rxqk1PKh3wxMEyHQampmXj6yr6aH8b9VOYmivbRg68izFA04o7+1xk=
X-Google-Smtp-Source: AGHT+IFxLhv1nUWLtxiwcBpGvfq/C1aXJI0ozRjlvJSj6R7IGfQLNlcORFzWwZemYNAZsoBewJ597A==
X-Received: by 2002:a05:600c:4e90:b0:413:2308:7d94 with SMTP id f16-20020a05600c4e9000b0041323087d94mr3002064wmq.20.1710255792337;
Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Received: from [172.28.0.62] ([43.157.82.69])
by smtp.gmail.com with ESMTPSA id q8-20020a05600c46c800b00412d60cb914sm19392540wmo.5.2024.03.12.08.03.12
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Message-ID: <65f06eb0.050a0220.4f155.1abd@mx.google.com>
Date: Tue, 12 Mar 2024 08:03:12 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0189943787315782554=="
MIME-Version: 1.0
Subject: Invoice for order no 32808325
From: Nguyen tran Thu thuy
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: Microsoft CDO for Windows 2000
List-Unsubscribe:
List-Owner:
List-ID: studentarjinaakter10@gmail.com
List-Subscribe: studentarjinaakter10@gmail.com
List-Post:
--===============0189943787315782554==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============0189943787315782554==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments