Interac Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 15 Mar 2024 12:11:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rlC0u-0000000044p-20nO
for dave@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 12:10:40 -0600
Resent-From: The Doctor
Resent-Date: Fri, 15 Mar 2024 12:10:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f51.google.com ([209.85.219.51]:45173)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rlA39-00000000My5-3pix
for doctor@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 10:05:00 -0600
Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-69107859bedso14672286d6.2
for; Fri, 15 Mar 2024 09:02:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710518571; x=1711123371; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=QvbInPNV1WdwdRv/SSzaZ0SuTbXr43G+L0qRqUiA8UM=;
b=ETrTyFGPg8qNeWfPglB9ot/VrJW0ghL7QuM8hxy0JdDctDcV4MGDKGYfLIdJ6C+ko3
J5qPU8Zudg9e9Fb5rAbq4xB+fDrc3lUNa+O9p4JPKKqd3OmZ1AW2kFv6maYKbDMXW+t1
YF85VpnzND+Zm8ups2NGH37rjh1RflXs9ZCAuWHCh5pVf+ba4syf4HuLAnQdYMJWSlDH
BGWev3M2uyshtchfVMawnCRe8Aj0/TiH8mz66BW1ocHmnNpAGCaJSSe4DNmNLPascOnj
V3QqSyrz+KUY8sNWjtONOoTByMP8BGTT+DA6SMcvzeuEmihuEwzhkSenwUkJp2b366B6
bKZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710518571; x=1711123371;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=QvbInPNV1WdwdRv/SSzaZ0SuTbXr43G+L0qRqUiA8UM=;
b=U11D0oviDE4fH77C9gJMFB0OoONTND5BTkU4c/HsO1FeRDlf8NxDJ+ZpeuAi7SG58q
zmJjMEgpP6qNhBuWqL1SPpZf9FluHLIV1lqALFXMdC3h7mvw3VONs1dhvOQd762ZUmkx
tLPWtonMf384JXipt0P2ZoONr5erH3U3ILe6ka/ouL+Py6uy9A+fD2IuB3iuwQdb5vnR
05m4QNEQJ1+h945cLGaJQmCbS45VDydZrOfMdKXnquSMLANndWI2HjnjqrU19o+cRsN1
DVjtzhdAfeKCSgNAjhV0lY51i6g3jsRxKQHYws10K0SCqdsOSSyzbhynJuNLkE/32fdt
eXOg==
X-Gm-Message-State: AOJu0YxURJeGjcMeo95igoesOJOZteelvyxwYXrpM26WfaF7nLZz7lO9
BxXzd7DeBOm8bCOSN9X7Ioh9dsp0PWzeoopanWwUMnekXs1Q9hMGGZnhEXvIF2I=
X-Google-Smtp-Source: AGHT+IEf6G5QqPghfhQ3TPMEKc0Iat9pRkfRUxlfJpc8HQ1K2rVe/hlNwei0RU9ffoT4L6H/XQfTdg==
X-Received: by 2002:a17:90b:1281:b0:29a:8c78:9a7 with SMTP id fw1-20020a17090b128100b0029a8c7809a7mr4913754pjb.40.1710517128290;
Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Received: from [172.26.0.128] ([43.130.59.177])
by smtp.gmail.com with ESMTPSA id f22-20020a17090aa79600b0029baf777c59sm3082601pjq.17.2024.03.15.08.38.47
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Message-ID: <65f46b88.170a0220.31d3e.93b4@mx.google.com>
Date: Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0374229434599466138=="
MIME-Version: 1.0
Subject: Paid Invoice for order no HF997610DA
From: Megan Wright
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: QQMail 2.x
List-Unsubscribe:
List-Owner:
List-ID: mdshahid201920@gmail.com
List-Subscribe: mdshahid201920@gmail.com
List-Post:
--===============0374229434599466138==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5
OyYjMTAxOyBEYXRlOiBNYXJjaCAxNSwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7
JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv
Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg
VG90YWwgc2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2
YXRpb24gS2V5OiBaUTc1MjlDVzxicj4KPGJyPgo8YnI+CllvdXIgJiM4MDsmIzk3OyYjMTIxOyYj
MTA5OyYjMTAxOyYjMTEwOyYjMTE2OyAmIzczOyYjMTEwOyYjMTE4OyYjMTExOyYjMTA1OyYjOTk7
JiMxMDE7IGZvciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgc2Vj
dXJlPC9iPiBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5LCBhbmQgd2UgYXJlIHBsZWFz
ZWQgdG8gaW5mb3JtIHlvdS48YnI+IFRoZSBhbW91bnQgb2YgPGI+JiMzNjs0MjkuMjk8L2I+IG9u
IHRvZGF5J3MgcmVjZWlwdCByZXByZXNlbnRzIHRoZSBhdXRvLSYjMTE0OyYjMTAxOyYjMTEwOyYj
MTAxOyYjMTE5OyYjOTc7JiMxMDg7IG9mIDxiPiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYj
MTAxOyBUb3RhbCBzZWN1cmU8L2I+Ljxicj5TaG91bGQgeW91IGhhdmUgYW55IGRvdWJ0cyBvciBy
ZXF1aXJlIG1vcmUgZGV0YWlscyBhYm91dCB0aGlzIHRyYW5zYWN0aW9uLCBwbGVhc2UgZmVlbCBm
cmVlIHRvIHJlYWNoIG91dCB0byB1cy48YnI+U2hvdWxkIHlvdSBuZWVkIHN1cHBvcnQsIHBsZWFz
ZSBkb24ndCBoZXNpdGF0ZSB0byBnZXQgaW4gdG91Y2ggd2l0aCBvdXIgY3VzdG9tZXIgc2Vydmlj
ZSB0ZWFtIGF0IDxiPiYjNDM7JiM0OTsoJiM1NjsmIzUzOyYjNTQ7KSA3JiM0OTs4LSYjNTc7JiM0
OTswNjwvYj4gd2l0aGluIHRoZSBuZXh0IHNpeCBob3Vycy4KPGJyPgo8YnI+Cjxicj4KV2UgYXJl
IGdyYXRlZnVsIGZvciB5b3VyIGRlY2lzaW9uIHRvIHVzZSBHZWVrIDxiPiYjNzc7JiM5OTsmIzk3
OyYjMTAyOyYjMTAxOyYjMTAxOyBUb3RhbCBzZWN1cmU8L2I+LiBZb3VyIHRydXN0IGluIG91ciBz
ZXJ2aWNlcyBpcyBoZWxkIGluIGhpZ2ggZXN0ZWVtLjxicj4KPGJyPgo8YnI+Cldhcm0gcmVnYXJk
cyw8YnI+CiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBUb3RhbCBzZWN1cmU8YnI+
CjQ4MDggTWF5bmFyZCBSZCBDYWxnYXJ5IFQyRSA2SjggQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVz
LCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4mIzQzOyYjNDk7KCYjNTY7JiM1MzsmIzU0OykgNyYj
NDk7OC0mIzU3OyYjNDk7MDY8L2I+Lg==
--===============0374229434599466138==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 15 Mar 2024 12:11:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rlC0u-0000000044p-20nO
for dave@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 12:10:40 -0600
Resent-From: The Doctor
Resent-Date: Fri, 15 Mar 2024 12:10:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f51.google.com ([209.85.219.51]:45173)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rlA39-00000000My5-3pix
for doctor@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 10:05:00 -0600
Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-69107859bedso14672286d6.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710518571; x=1711123371; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=QvbInPNV1WdwdRv/SSzaZ0SuTbXr43G+L0qRqUiA8UM=;
b=ETrTyFGPg8qNeWfPglB9ot/VrJW0ghL7QuM8hxy0JdDctDcV4MGDKGYfLIdJ6C+ko3
J5qPU8Zudg9e9Fb5rAbq4xB+fDrc3lUNa+O9p4JPKKqd3OmZ1AW2kFv6maYKbDMXW+t1
YF85VpnzND+Zm8ups2NGH37rjh1RflXs9ZCAuWHCh5pVf+ba4syf4HuLAnQdYMJWSlDH
BGWev3M2uyshtchfVMawnCRe8Aj0/TiH8mz66BW1ocHmnNpAGCaJSSe4DNmNLPascOnj
V3QqSyrz+KUY8sNWjtONOoTByMP8BGTT+DA6SMcvzeuEmihuEwzhkSenwUkJp2b366B6
bKZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710518571; x=1711123371;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=QvbInPNV1WdwdRv/SSzaZ0SuTbXr43G+L0qRqUiA8UM=;
b=U11D0oviDE4fH77C9gJMFB0OoONTND5BTkU4c/HsO1FeRDlf8NxDJ+ZpeuAi7SG58q
zmJjMEgpP6qNhBuWqL1SPpZf9FluHLIV1lqALFXMdC3h7mvw3VONs1dhvOQd762ZUmkx
tLPWtonMf384JXipt0P2ZoONr5erH3U3ILe6ka/ouL+Py6uy9A+fD2IuB3iuwQdb5vnR
05m4QNEQJ1+h945cLGaJQmCbS45VDydZrOfMdKXnquSMLANndWI2HjnjqrU19o+cRsN1
DVjtzhdAfeKCSgNAjhV0lY51i6g3jsRxKQHYws10K0SCqdsOSSyzbhynJuNLkE/32fdt
eXOg==
X-Gm-Message-State: AOJu0YxURJeGjcMeo95igoesOJOZteelvyxwYXrpM26WfaF7nLZz7lO9
BxXzd7DeBOm8bCOSN9X7Ioh9dsp0PWzeoopanWwUMnekXs1Q9hMGGZnhEXvIF2I=
X-Google-Smtp-Source: AGHT+IEf6G5QqPghfhQ3TPMEKc0Iat9pRkfRUxlfJpc8HQ1K2rVe/hlNwei0RU9ffoT4L6H/XQfTdg==
X-Received: by 2002:a17:90b:1281:b0:29a:8c78:9a7 with SMTP id fw1-20020a17090b128100b0029a8c7809a7mr4913754pjb.40.1710517128290;
Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Received: from [172.26.0.128] ([43.130.59.177])
by smtp.gmail.com with ESMTPSA id f22-20020a17090aa79600b0029baf777c59sm3082601pjq.17.2024.03.15.08.38.47
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Message-ID: <65f46b88.170a0220.31d3e.93b4@mx.google.com>
Date: Fri, 15 Mar 2024 08:38:48 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0374229434599466138=="
MIME-Version: 1.0
Subject: Paid Invoice for order no HF997610DA
From: Megan Wright
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: QQMail 2.x
List-Unsubscribe:
List-Owner:
List-ID: mdshahid201920@gmail.com
List-Subscribe: mdshahid201920@gmail.com
List-Post:
--===============0374229434599466138==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============0374229434599466138==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments