Mcafee phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 Mar 2024 10:46:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rmG6r-0000000061B-04M5
for dave@doctor.nl2k.ab.ca;
Mon, 18 Mar 2024 10:45:13 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 Mar 2024 10:45:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f170.google.com ([209.85.214.170]:43057)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rmFVa-00000000LBn-0CQl
for doctor@doctor.nl2k.ab.ca;
Mon, 18 Mar 2024 10:06:50 -0600
Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-1def89f0cfdso19487405ad.0
for; Mon, 18 Mar 2024 09:04:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710777881; x=1711382681; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=tCxTBzms4fXDR+3bReENZcUlo4Reod71AwBiTdXCsrM=;
b=WgmYR8yaa7mPcSUwXuBF3P5YDP4jG0L1oLt4mPQN9xqTyOBhwjJRqDkIK9kzNhTQU8
d67esElotN7flBRll6HRMubPpWFngb3YCUfqWPvqbHZgwTMGy76Cv5OmBlvDFNBe/RuJ
680Zy3Gm4kNZPDW3qCm0ZDDTOIBiUzqTMJDSjAXKxDuwzEfACh3U25pJRoWWP2LA7vhG
D1lJooRflNtOymHITJVlEQL95kE3ll0TJ1b6Wl8s1aFAfZNDmoIeR/sw0/yV/j1bjsvp
R8ENpt48O4hbGc4Ytiz2Ot/h9RKPnwpKNt527WU7cNbOqvgKlVH+ThrlgvsQ+VZUQWzM
V5Ng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710777881; x=1711382681;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=tCxTBzms4fXDR+3bReENZcUlo4Reod71AwBiTdXCsrM=;
b=R+2V1gkTtag5zV+L1mw33sIyqQjhqKKKzRAC4sJsBPa3Qga147BXAlL98+klIDBk8p
1yk+YZnBjRBhMzJ2zFRdkUnoM3U5BpQnGTyEkCTDZ0t61VXQOy+2RB+5RmQZ9Xw4aYMB
b3/vfynsrV21BccEJDCzdDtdLrioTfx7X4QFDIVdL6TDecLAbgC3Zg+Q5Wv6w6iCU9EH
ihwLhMJSCj8D46i8mWEhqSN/HsWvbehPVD7xg6DN3s2S/PCRDoOID9tV33uBp37w0zpj
xjAp4vsNfxJ+hx/5J88YvaYIPqHupDIHdsTnVEOAm2RUxh9POk15NlEpLzU1j+GQN5rn
R8kw==
X-Gm-Message-State: AOJu0YwMBBdruep4Q/9ztvvA9MSNfSzSs6wK4x6etGgiX8JU0HZ31+WK
MuENHybKaOo0ZBtVw2IlSuvskhC1nmiv9jFbmKnZ0+SLspYKrnXdmgEazajZdmw=
X-Google-Smtp-Source: AGHT+IG1BLWD+CZl+fcQg0n2JAo0mKHYLDrAa36zJrt2R9m3XG8VAA/1ssRpgnXh3FhDcTEj+y/UOg==
X-Received: by 2002:a17:902:da92:b0:1dd:e403:a082 with SMTP id j18-20020a170902da9200b001dde403a082mr76486plx.1.1710777881351;
Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Received: from [10.201.0.108] ([43.152.232.235])
by smtp.gmail.com with ESMTPSA id c8-20020a170903234800b001c407fac227sm9442052plh.41.2024.03.18.09.04.40
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Message-ID: <65f86619.170a0220.524c.9507@mx.google.com>
Date: Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============4007533095001692692=="
MIME-Version: 1.0
Subject: Draft invoice number 97965693 for your recent purchase
From: John Whitehead
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: TechWizMail [version 3.5]
List-Unsubscribe:
List-Owner:
List-ID: warukenyajane41@gmail.com
List-Subscribe: warukenyajane41@gmail.com
List-Post:
--===============4007533095001692692==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============4007533095001692692==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 Mar 2024 10:46:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rmG6r-0000000061B-04M5
for dave@doctor.nl2k.ab.ca;
Mon, 18 Mar 2024 10:45:13 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 Mar 2024 10:45:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f170.google.com ([209.85.214.170]:43057)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rmFVa-00000000LBn-0CQl
for doctor@doctor.nl2k.ab.ca;
Mon, 18 Mar 2024 10:06:50 -0600
Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-1def89f0cfdso19487405ad.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710777881; x=1711382681; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=tCxTBzms4fXDR+3bReENZcUlo4Reod71AwBiTdXCsrM=;
b=WgmYR8yaa7mPcSUwXuBF3P5YDP4jG0L1oLt4mPQN9xqTyOBhwjJRqDkIK9kzNhTQU8
d67esElotN7flBRll6HRMubPpWFngb3YCUfqWPvqbHZgwTMGy76Cv5OmBlvDFNBe/RuJ
680Zy3Gm4kNZPDW3qCm0ZDDTOIBiUzqTMJDSjAXKxDuwzEfACh3U25pJRoWWP2LA7vhG
D1lJooRflNtOymHITJVlEQL95kE3ll0TJ1b6Wl8s1aFAfZNDmoIeR/sw0/yV/j1bjsvp
R8ENpt48O4hbGc4Ytiz2Ot/h9RKPnwpKNt527WU7cNbOqvgKlVH+ThrlgvsQ+VZUQWzM
V5Ng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710777881; x=1711382681;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=tCxTBzms4fXDR+3bReENZcUlo4Reod71AwBiTdXCsrM=;
b=R+2V1gkTtag5zV+L1mw33sIyqQjhqKKKzRAC4sJsBPa3Qga147BXAlL98+klIDBk8p
1yk+YZnBjRBhMzJ2zFRdkUnoM3U5BpQnGTyEkCTDZ0t61VXQOy+2RB+5RmQZ9Xw4aYMB
b3/vfynsrV21BccEJDCzdDtdLrioTfx7X4QFDIVdL6TDecLAbgC3Zg+Q5Wv6w6iCU9EH
ihwLhMJSCj8D46i8mWEhqSN/HsWvbehPVD7xg6DN3s2S/PCRDoOID9tV33uBp37w0zpj
xjAp4vsNfxJ+hx/5J88YvaYIPqHupDIHdsTnVEOAm2RUxh9POk15NlEpLzU1j+GQN5rn
R8kw==
X-Gm-Message-State: AOJu0YwMBBdruep4Q/9ztvvA9MSNfSzSs6wK4x6etGgiX8JU0HZ31+WK
MuENHybKaOo0ZBtVw2IlSuvskhC1nmiv9jFbmKnZ0+SLspYKrnXdmgEazajZdmw=
X-Google-Smtp-Source: AGHT+IG1BLWD+CZl+fcQg0n2JAo0mKHYLDrAa36zJrt2R9m3XG8VAA/1ssRpgnXh3FhDcTEj+y/UOg==
X-Received: by 2002:a17:902:da92:b0:1dd:e403:a082 with SMTP id j18-20020a170902da9200b001dde403a082mr76486plx.1.1710777881351;
Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Received: from [10.201.0.108] ([43.152.232.235])
by smtp.gmail.com with ESMTPSA id c8-20020a170903234800b001c407fac227sm9442052plh.41.2024.03.18.09.04.40
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Message-ID: <65f86619.170a0220.524c.9507@mx.google.com>
Date: Mon, 18 Mar 2024 09:04:41 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============4007533095001692692=="
MIME-Version: 1.0
Subject: Draft invoice number 97965693 for your recent purchase
From: John Whitehead
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: TechWizMail [version 3.5]
List-Unsubscribe:
List-Owner:
List-ID: warukenyajane41@gmail.com
List-Subscribe: warukenyajane41@gmail.com
List-Post:
--===============4007533095001692692==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============4007533095001692692==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments