McAfee Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Apr 2024 11:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rrLSt-0000000037V-24dA

for dave@doctor.nl2k.ab.ca;

Mon, 01 Apr 2024 11:28:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Apr 2024 11:28:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f176.google.com ([209.85.215.176]:48233)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rrJL7-000000007aS-2sm4

for doctor@doctor.nl2k.ab.ca;

Mon, 01 Apr 2024 09:12:52 -0600

Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-5d81b08d6f2so3250253a12.0

for ; Mon, 01 Apr 2024 08:10:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711984249; x=1712589049; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;

b=cTYHMimu2J9k/zwIpuJlFjgVL917y3bfbSRgnFuDJ7+v7JtRyBddxt7ZlFoVeOtTUO

iTPoDlBsGVAPSVNRsvnc6X6xC6B4fX9hckBXiCmuOx1n4vJr6mPyLbrMiKdMJRgwksyc

fFRH1f11gg1ocJMKBktsdl3Tt8zrdWNP6gxQTMZdoaVxIPrDd6FdSaEZKeBeqfRS6I4Z

7AFu7XNSVwGqSBBjegkAr32bFIRB+wLPgXZ/h9fNSRdMOuP8CITHJl8VmRrzgDzWg4uu

RpZEE7JxNSzfzsLQIJ0fcWtzEkwgDPDY+sbSEj2MlZgR/nkzRr5tyVNAOEr7aYRYDKdw

3Ikw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711984249; x=1712589049;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;

b=VYRQuV/oEGMV6/3vZwHMJCj3bN+/ie19HD/Fm+4Mn9yqV1Ip19gQdmxTuKFH3m0QnL

CR5wqnbwVHOKoqFerT0V4AJMLN/PJztehg4WIuPz5/jPQmFrhqQCWB8R6AhmSaghJiy+

7TTULqlRCGcmMlEmYlNK9Li1a7WGeswKqKobjFveVKNplVQ2vfS0Be557s2ciGOPl7WG

YOCvnA+V5/F07SBykizgfxBf0YVV6s2VTJi0LPXv5+vk26UsUcfs5okNYi+iZ6e1iru+

H1iRSSfEqlv4kFuXu056ooPaOv4bOLIQJS64dYsXTEzyhwzleECNKFYhgnKzVBrQhUp+

2CGA==

X-Gm-Message-State: AOJu0Yw65cE9fllIO9mzKUirRUGQf2IcQf0tBnub8fzKOLdek8PcDOi3

5CbdQpPnbbsGHH3lLk8q/jZg9xsZG+bA/u/6R9fQr52X+uay7GQm2NsrIdl77sViHQ==

X-Google-Smtp-Source: AGHT+IGSalfz4GEnXTKfs1PUGtD2AemUBumV8/nkwM9StTwhdU7LpC+x51ovqQB4LucHmLV4I0KF3A==

X-Received: by 2002:a17:903:32cb:b0:1e0:7bbf:bef4 with SMTP id i11-20020a17090332cb00b001e07bbfbef4mr11298057plr.41.1711984248840;

Mon, 01 Apr 2024 08:10:48 -0700 (PDT)

Received: from [172.31.0.53] ([124.156.46.139])

by smtp.gmail.com with ESMTPSA id g7-20020a170902f74700b001e24988b99asm4228514plw.250.2024.04.01.08.10.47

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 01 Apr 2024 08:10:48 -0700 (PDT)

Message-ID: <660ace78.170a0220.22580.93cc@mx.google.com>

Date: Mon, 01 Apr 2024 08:10:48 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============2361134655248403793=="

MIME-Version: 1.0

Subject: Payment for order no. 74205317 is approved

From: Christina Sorrells

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: ZuckMail [version 1.00]

List-Unsubscribe:

List-Owner:

List-ID: kpodoviaanthony123456@gmail.com

List-Subscribe: kpodoviaanthony123456@gmail.com

List-Post:

X-Antivirus: AVG (VPS 240401-10, 4/1/2024), Inbound message

X-Antivirus-Status: Clean



--===============2361134655248403793==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBBcHJpbCAwMSwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

U2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24g

S2V5OiBaUTcyNjNDVzxicj4KPGJyPgo8YnI+CllvdXIgPGI+JiM3NzsmIzk5OyYjOTc7JiMxMDI7

JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gdHJhbnNhY3Rpb24gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5

IGNvbXBsZXRlZC4gRW5qb3kgeW91ciBwcm9kdWN0Ljxicj4gVGhlICYjODA7JiM5NzsmIzEyMTsm

IzEwOTsmIzEwMTsmIzExMDsmIzExNjsgb2YgPGI+JDQ1Mi41MjwvYj4gZm9yIHRoZSA8Yj4mIzc3

OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiBoYXMgYmVlbiBzdWNjZXNz

ZnVsbHkgcHJvY2Vzc2VkLjxicj5TaG91bGQgeW91IHJlcXVpcmUgYW55IGFkZGl0aW9uYWwgaW5m

b3JtYXRpb24gb3IgY2xhcmlmaWNhdGlvbiByZWdhcmRpbmcgdGhpcyB0cmFuc2FjdGlvbiwgZmVl

bCBmcmVlIHRvIGNvbnRhY3QgdXMuPGJyPkNvbnRhY3Qgb3VyIGN1c3RvbWVyIHNlcnZpY2UgdGVh

bSBhdCA8Yj4mIzQzOyYjNDk7KCYjNTY7NCYjNTE7KSA0JiM1NTs0LTAmIzU2OzI3PC9iPiB3aXRo

aW4gdGhlIG5leHQgc2l4IGhvdXJzIGlmIHlvdSBuZWVkIGFzc2lzdGFuY2UuCjxicj4KPGJyPgo8

YnI+CldlIHNpbmNlcmVseSBhcHByZWNpYXRlIHlvdXIgdHJ1c3QgaW4gPGI+JiM3NzsmIzk5OyYj

OTc7JiMxMDI7JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gYW5kIHRoYW5rIHlvdSBmb3IgY2hvb3Np

bmcgdXMuPGJyPgo8YnI+Cjxicj4KV2FybSByZWdhcmRzLDxicj4KJiM3NzsmIzk5OyYjOTc7JiMx

MDI7JiMxMDE7JiMxMDE7IFNlY3VyZTxicj4KMjIwIFRyaW5pdHkgV2F5IFd2IFVuaXRlZCBTdGF0

ZXM8YnI+CkZvciBpbnF1aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPiYjNDM7JiM0OTso

JiM1Njs0JiM1MTspIDQmIzU1OzQtMCYjNTY7Mjc8L2I+Lg==



--===============2361134655248403793==--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA