Mcafee phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 Mar 2024 11:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkoKa-000000000NC-1iAz

for dave@doctor.nl2k.ab.ca;

Thu, 14 Mar 2024 10:53:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 Mar 2024 10:53:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f66.google.com ([209.85.210.66]:46252)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkmx0-00000000HkZ-3wcy

for doctor@doctor.nl2k.ab.ca;

Thu, 14 Mar 2024 09:25:01 -0600

Received: by mail-ot1-f66.google.com with SMTP id 46e09a7af769-6ddf26eba3cso722286a34.0

for ; Thu, 14 Mar 2024 08:23:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710429778; x=1711034578; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=Fn6bRFK+oWl/VxOn9ABJ2jRcwK9jD9jBEun2uEwsKFM=;

b=SA8rZQoH42iats9fldgGfFKamStKV+7dsxS34iQjd9h31txTcrn2r5GZHwwH7Hpwsv

6SpU5Y+06bNO3VNDnHOpGsbD/iOUO9JzV0qg3iVAgG9tHOwamQhMnJvUTDPjW46BV8N9

HAJgqYnZ7euvwOiUYdAJddMBaDNfgBKsEOoRph+jLXLI6gF4ugVYsiyqBkZfNexGbV1/

4gSxU4wKa22GxRuFeDOLtkHEr0D970PbfFPNFPEYPSR6BPMyzZjPugK5nOnDE88KrXo9

Ug4mTO3fwtGdmU+5N56P4g6BuA9NUKoSjsnHunGqcyfQgYY7zaqS8arS+YjlphpPfjSl

SeSA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710429778; x=1711034578;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=Fn6bRFK+oWl/VxOn9ABJ2jRcwK9jD9jBEun2uEwsKFM=;

b=OE0anXUCR2R9hiDOQJkPjxkNaxdAFSzyj+ZMmm+ZXDIKTOV9fSV9J195Njidq9MQ3c

cipamvmFvLAeohBXcSM6hxaj/QPO0Dq23ZXnzy0+eO7JpzqzQ7Qx0hj7yZhqlacgtpis

eVM2YFVG4l2jdtByACRErUZ+n6pIGhcLzJTFw6/e1VaU3zEzhchjnS5ynAIYHm3KUnRL

dtmxHYBp/2OpSR8ocREzONI8SPjEuBob7SVYfWnF8qKzT++ENNGw9gU8k2HrABRA2FAs

5L97xMR8n9BOErf6YJqwsvuhB8OSw6QXF4ThUxkiUvRrso1hwLncwQddoUtrBmH77NI0

cJEQ==

X-Gm-Message-State: AOJu0Yxxk2l4ZxwIAFSsl33SrvQkWV/TjNjvKQ51BXLq7K9hsixho03s

nMQhI/G6CDBqewsf7m6kmqpo9eySyeoUa4GMYqLqc+uArZT/lWHlFSDr0T37PWY1M//E

X-Google-Smtp-Source: AGHT+IF7ZX3mgoxJ+LJ6KvhjvA+beWp/eUmnV90WQrVOXqZK54IkFWBDI+mOQqpgzOLymDzdhk3CWQ==

X-Received: by 2002:a05:6830:1090:b0:6e5:227d:f740 with SMTP id y16-20020a056830109000b006e5227df740mr2221825oto.0.1710427923703;

Thu, 14 Mar 2024 07:52:03 -0700 (PDT)

Received: from [10.200.0.42] ([43.130.124.165])

by smtp.gmail.com with ESMTPSA id kb11-20020a05622a448b00b0042f2f791592sm846152qtb.63.2024.03.14.07.52.03

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 14 Mar 2024 07:52:03 -0700 (PDT)

Message-ID: <65f30f13.050a0220.42826.1f63@mx.google.com>

Date: Thu, 14 Mar 2024 07:52:03 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============6534592004503921804=="

MIME-Version: 1.0

Subject: On we received payment for your invoice no 56992712

From: Charles Hull

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: ZuckMail [version 1.00]

List-Unsubscribe:

List-Owner:

List-ID: shannonlaceyla17@gmail.com

List-Subscribe: shannonlaceyla17@gmail.com

List-Post:



--===============6534592004503921804==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAxNCwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

U2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24g

S2V5OiBaUTk0NTZDVzxicj4KPGJyPgo8YnI+CldlIGFyZSBkZWxpZ2h0ZWQgdG8gaW5mb3JtIHlv

dSB0aGF0IHlvdXIgJiM4MDsmIzk3OyYjMTIxOyYjMTA5OyYjMTAxOyYjMTEwOyYjMTE2OyAmIzcz

OyYjMTEwOyYjMTE4OyYjMTExOyYjMTA1OyYjOTk7JiMxMDE7IGZvciA8Yj4mIzc3OyYjOTk7JiM5

NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vz

c2Z1bGx5Ljxicj4gVG9kYXkncyByZWNlaXB0IGluZGljYXRlcyBhICYjODA7JiM5NzsmIzEyMTsm

IzEwOTsmIzEwMTsmIzExMDsmIzExNjsgb2YgPGI+JiMzNjs0NDQuNDQ8L2I+IGZvciB0aGUgYXV0

b21hdGljICYjMTE0OyYjMTAxOyYjMTEwOyYjMTAxOyYjMTE5OyYjOTc7JiMxMDg7IG9mIDxiPiYj

Nzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBTZWN1cmU8L2I+Ljxicj5JZiB5b3UgaGF2

ZSBhbnkgZG91YnRzIG9yIHJlcXVpcmUgbW9yZSBkZXRhaWxzIGFib3V0IHRoaXMgdHJhbnNhY3Rp

b24sIHBsZWFzZSBmZWVsIGZyZWUgdG8gcmVhY2ggb3V0IHRvIHVzLjxicj5TaG91bGQgeW91IHJl

cXVpcmUgYXNzaXN0YW5jZSwgcGxlYXNlIGRvbid0IGhlc2l0YXRlIHRvIGNvbnRhY3Qgb3VyIGN1

c3RvbWVyIHNlcnZpY2UgdGVhbSBhdCA8Yj4mIzQzOyYjNDk7KCYjNTY7JiM1MTsmIzQ4OykgNSYj

NTI7Mi0mIzU3OyYjNTA7ODk8L2I+IHdpdGhpbiB0aGUgbmV4dCBzaXggaG91cnMuCjxicj4KPGJy

Pgo8YnI+CllvdXIgZGVjaXNpb24gdG8gdXNlIEdlZWsgPGI+JiM3NzsmIzk5OyYjOTc7JiMxMDI7

JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gaXMgYXBwcmVjaWF0ZWQuIFdlIGRlZXBseSB2YWx1ZSB0

aGUgdHJ1c3QgeW91J3ZlIHBsYWNlZCBpbiBvdXIgc2VydmljZXMuPGJyPgo8YnI+Cjxicj4KV2Fy

bSByZWdhcmRzLDxicj4KJiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IFNlY3VyZTxi

cj4KMTE5MyBSZXNlcnZlIFN0IENpdHkgQmFuY3JvZnQgSzBMIDFDMCBDYW5hZGE8YnI+CkZvciBp

bnF1aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPiYjNDM7JiM0OTsoJiM1NjsmIzUxOyYj

NDg7KSA1JiM1MjsyLSYjNTc7JiM1MDs4OTwvYj4u



--===============6534592004503921804==--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA