McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Apr 2024 11:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rrLSt-0000000037V-24dA
for dave@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 11:28:59 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Apr 2024 11:28:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f176.google.com ([209.85.215.176]:48233)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rrJL7-000000007aS-2sm4
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 09:12:52 -0600
Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-5d81b08d6f2so3250253a12.0
for; Mon, 01 Apr 2024 08:10:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711984249; x=1712589049; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;
b=cTYHMimu2J9k/zwIpuJlFjgVL917y3bfbSRgnFuDJ7+v7JtRyBddxt7ZlFoVeOtTUO
iTPoDlBsGVAPSVNRsvnc6X6xC6B4fX9hckBXiCmuOx1n4vJr6mPyLbrMiKdMJRgwksyc
fFRH1f11gg1ocJMKBktsdl3Tt8zrdWNP6gxQTMZdoaVxIPrDd6FdSaEZKeBeqfRS6I4Z
7AFu7XNSVwGqSBBjegkAr32bFIRB+wLPgXZ/h9fNSRdMOuP8CITHJl8VmRrzgDzWg4uu
RpZEE7JxNSzfzsLQIJ0fcWtzEkwgDPDY+sbSEj2MlZgR/nkzRr5tyVNAOEr7aYRYDKdw
3Ikw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711984249; x=1712589049;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;
b=VYRQuV/oEGMV6/3vZwHMJCj3bN+/ie19HD/Fm+4Mn9yqV1Ip19gQdmxTuKFH3m0QnL
CR5wqnbwVHOKoqFerT0V4AJMLN/PJztehg4WIuPz5/jPQmFrhqQCWB8R6AhmSaghJiy+
7TTULqlRCGcmMlEmYlNK9Li1a7WGeswKqKobjFveVKNplVQ2vfS0Be557s2ciGOPl7WG
YOCvnA+V5/F07SBykizgfxBf0YVV6s2VTJi0LPXv5+vk26UsUcfs5okNYi+iZ6e1iru+
H1iRSSfEqlv4kFuXu056ooPaOv4bOLIQJS64dYsXTEzyhwzleECNKFYhgnKzVBrQhUp+
2CGA==
X-Gm-Message-State: AOJu0Yw65cE9fllIO9mzKUirRUGQf2IcQf0tBnub8fzKOLdek8PcDOi3
5CbdQpPnbbsGHH3lLk8q/jZg9xsZG+bA/u/6R9fQr52X+uay7GQm2NsrIdl77sViHQ==
X-Google-Smtp-Source: AGHT+IGSalfz4GEnXTKfs1PUGtD2AemUBumV8/nkwM9StTwhdU7LpC+x51ovqQB4LucHmLV4I0KF3A==
X-Received: by 2002:a17:903:32cb:b0:1e0:7bbf:bef4 with SMTP id i11-20020a17090332cb00b001e07bbfbef4mr11298057plr.41.1711984248840;
Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Received: from [172.31.0.53] ([124.156.46.139])
by smtp.gmail.com with ESMTPSA id g7-20020a170902f74700b001e24988b99asm4228514plw.250.2024.04.01.08.10.47
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Message-ID: <660ace78.170a0220.22580.93cc@mx.google.com>
Date: Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============2361134655248403793=="
MIME-Version: 1.0
Subject: Payment for order no. 74205317 is approved
From: Christina Sorrells
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: kpodoviaanthony123456@gmail.com
List-Subscribe: kpodoviaanthony123456@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240401-10, 4/1/2024), Inbound message
X-Antivirus-Status: Clean
--===============2361134655248403793==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============2361134655248403793==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Apr 2024 11:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rrLSt-0000000037V-24dA
for dave@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 11:28:59 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Apr 2024 11:28:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f176.google.com ([209.85.215.176]:48233)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rrJL7-000000007aS-2sm4
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 09:12:52 -0600
Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-5d81b08d6f2so3250253a12.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711984249; x=1712589049; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;
b=cTYHMimu2J9k/zwIpuJlFjgVL917y3bfbSRgnFuDJ7+v7JtRyBddxt7ZlFoVeOtTUO
iTPoDlBsGVAPSVNRsvnc6X6xC6B4fX9hckBXiCmuOx1n4vJr6mPyLbrMiKdMJRgwksyc
fFRH1f11gg1ocJMKBktsdl3Tt8zrdWNP6gxQTMZdoaVxIPrDd6FdSaEZKeBeqfRS6I4Z
7AFu7XNSVwGqSBBjegkAr32bFIRB+wLPgXZ/h9fNSRdMOuP8CITHJl8VmRrzgDzWg4uu
RpZEE7JxNSzfzsLQIJ0fcWtzEkwgDPDY+sbSEj2MlZgR/nkzRr5tyVNAOEr7aYRYDKdw
3Ikw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711984249; x=1712589049;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=rDu3pjTWThorp30DXOoe8zZRE0mH+VsYb0RysQMZ5lQ=;
b=VYRQuV/oEGMV6/3vZwHMJCj3bN+/ie19HD/Fm+4Mn9yqV1Ip19gQdmxTuKFH3m0QnL
CR5wqnbwVHOKoqFerT0V4AJMLN/PJztehg4WIuPz5/jPQmFrhqQCWB8R6AhmSaghJiy+
7TTULqlRCGcmMlEmYlNK9Li1a7WGeswKqKobjFveVKNplVQ2vfS0Be557s2ciGOPl7WG
YOCvnA+V5/F07SBykizgfxBf0YVV6s2VTJi0LPXv5+vk26UsUcfs5okNYi+iZ6e1iru+
H1iRSSfEqlv4kFuXu056ooPaOv4bOLIQJS64dYsXTEzyhwzleECNKFYhgnKzVBrQhUp+
2CGA==
X-Gm-Message-State: AOJu0Yw65cE9fllIO9mzKUirRUGQf2IcQf0tBnub8fzKOLdek8PcDOi3
5CbdQpPnbbsGHH3lLk8q/jZg9xsZG+bA/u/6R9fQr52X+uay7GQm2NsrIdl77sViHQ==
X-Google-Smtp-Source: AGHT+IGSalfz4GEnXTKfs1PUGtD2AemUBumV8/nkwM9StTwhdU7LpC+x51ovqQB4LucHmLV4I0KF3A==
X-Received: by 2002:a17:903:32cb:b0:1e0:7bbf:bef4 with SMTP id i11-20020a17090332cb00b001e07bbfbef4mr11298057plr.41.1711984248840;
Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Received: from [172.31.0.53] ([124.156.46.139])
by smtp.gmail.com with ESMTPSA id g7-20020a170902f74700b001e24988b99asm4228514plw.250.2024.04.01.08.10.47
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Message-ID: <660ace78.170a0220.22580.93cc@mx.google.com>
Date: Mon, 01 Apr 2024 08:10:48 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============2361134655248403793=="
MIME-Version: 1.0
Subject: Payment for order no. 74205317 is approved
From: Christina Sorrells
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: kpodoviaanthony123456@gmail.com
List-Subscribe: kpodoviaanthony123456@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240401-10, 4/1/2024), Inbound message
X-Antivirus-Status: Clean
--===============2361134655248403793==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============2361134655248403793==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments