McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtqKc-0000000027N-3k7e
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:46 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:46 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f178.google.com ([209.85.214.178]:49409)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtq6S-000000000u4-0I4l
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:12 -0600
Received: by mail-pl1-f178.google.com with SMTP id d9443c01a7336-1e411e339b8so8260905ad.3
for; Mon, 08 Apr 2024 07:34:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586847; x=1713191647; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=0kUDHfyyTwf0SyWjyKDuYdDNMWC3vEIFAdyMUdJBosM=;
b=MAD+7CYiW+03wXZgr1CM/E9Z7+pcmmLXRpt3C9dEY4q1WftZhCkXkVx+zQfmu205Al
+egH7oL2y0amsufXfDeY211S9a6b35jVBwALdFN9JxMBehl6RWg4M3CMVqBnOMF58P8n
HNV6xK/BkCgwnt1S5mBxFbSoNna4Vo51VC7QZ7NR8V+WNgFa9e7tr81AQLg0n08J6QVR
v5lnCebdGPA2wFFKc3UzcfU2eeDUyd5CvKOQbaitmZ7+NpIlZIe7Ee0nj9Gk990GCJhJ
fUSF+WOmR35fLSdAVhx/5+18P87tlc+YG7w6Q3Evf7zr6kqIAcQ5oFiPxuYDm5P/yLmX
iXkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586847; x=1713191647;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=0kUDHfyyTwf0SyWjyKDuYdDNMWC3vEIFAdyMUdJBosM=;
b=JdfZPLafjc8jaDPF158iKO9pi3atCf6tYBTFxYnKZixqbgKJ2xUTz97h0YKpTic8m5
03zGRiPNflTq04yyzx9/hTcGcD9x+BY2PC0xsOD6HdtVK1XxF0X2RXj3QCuS9RAinLAi
DD8FnaQRu4/bLgFcC9jVaYeBJYZltNnQ7zvAPiVJnXQ7Ie1qhfUlB03OJGtZ0Adae3U1
QYgWDa03pm4BWPuhvllNPGutO3XpWs4oqNWkL+9WRiOr9H4h1OxHUvbiuL8zkn+BSbQZ
r/8WFtSeczO0LVpmQN3Jo174TjO7/GdgUJfX50GYRfcZEb1VjnF+oFpSWBwbakivh7ux
fXQg==
X-Gm-Message-State: AOJu0YykY7jP2PePzHY5/2zwzoGSXw7E0/rdf5zfBWIx3/JfJuYTV4tB
kvKoJ8ci+cL6i3vGbKr8PdNvTVnDyznKS2/t739kX0tlpjiV0SfDyGgZke3jEv9xxg==
X-Google-Smtp-Source: AGHT+IGV29k2tIp+vhBZqEABj0+6n5iUoFht3HNX9sElBNeAneqUE1wGXnWMlpvCmd2KlKYEf6yNpw==
X-Received: by 2002:a17:902:ec8b:b0:1dc:cf38:3a77 with SMTP id x11-20020a170902ec8b00b001dccf383a77mr11987995plg.55.1712586847421;
Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Received: from [10.203.16.62] ([124.156.217.146])
by smtp.gmail.com with ESMTPSA id u14-20020a170902e80e00b001e41c665992sm2562939plg.29.2024.04.08.07.34.06
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Message-ID: <6614005f.170a0220.5e155.5201@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0785335702796003275=="
MIME-Version: 1.0
Subject: Payment information letter of your order no HG911095DF
From: Stephanie Gotschall
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: TechWizMail [version 3.5]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============0785335702796003275==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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==
--===============0785335702796003275==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtqKc-0000000027N-3k7e
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:46 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:46 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f178.google.com ([209.85.214.178]:49409)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtq6S-000000000u4-0I4l
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:12 -0600
Received: by mail-pl1-f178.google.com with SMTP id d9443c01a7336-1e411e339b8so8260905ad.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586847; x=1713191647; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=0kUDHfyyTwf0SyWjyKDuYdDNMWC3vEIFAdyMUdJBosM=;
b=MAD+7CYiW+03wXZgr1CM/E9Z7+pcmmLXRpt3C9dEY4q1WftZhCkXkVx+zQfmu205Al
+egH7oL2y0amsufXfDeY211S9a6b35jVBwALdFN9JxMBehl6RWg4M3CMVqBnOMF58P8n
HNV6xK/BkCgwnt1S5mBxFbSoNna4Vo51VC7QZ7NR8V+WNgFa9e7tr81AQLg0n08J6QVR
v5lnCebdGPA2wFFKc3UzcfU2eeDUyd5CvKOQbaitmZ7+NpIlZIe7Ee0nj9Gk990GCJhJ
fUSF+WOmR35fLSdAVhx/5+18P87tlc+YG7w6Q3Evf7zr6kqIAcQ5oFiPxuYDm5P/yLmX
iXkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586847; x=1713191647;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=0kUDHfyyTwf0SyWjyKDuYdDNMWC3vEIFAdyMUdJBosM=;
b=JdfZPLafjc8jaDPF158iKO9pi3atCf6tYBTFxYnKZixqbgKJ2xUTz97h0YKpTic8m5
03zGRiPNflTq04yyzx9/hTcGcD9x+BY2PC0xsOD6HdtVK1XxF0X2RXj3QCuS9RAinLAi
DD8FnaQRu4/bLgFcC9jVaYeBJYZltNnQ7zvAPiVJnXQ7Ie1qhfUlB03OJGtZ0Adae3U1
QYgWDa03pm4BWPuhvllNPGutO3XpWs4oqNWkL+9WRiOr9H4h1OxHUvbiuL8zkn+BSbQZ
r/8WFtSeczO0LVpmQN3Jo174TjO7/GdgUJfX50GYRfcZEb1VjnF+oFpSWBwbakivh7ux
fXQg==
X-Gm-Message-State: AOJu0YykY7jP2PePzHY5/2zwzoGSXw7E0/rdf5zfBWIx3/JfJuYTV4tB
kvKoJ8ci+cL6i3vGbKr8PdNvTVnDyznKS2/t739kX0tlpjiV0SfDyGgZke3jEv9xxg==
X-Google-Smtp-Source: AGHT+IGV29k2tIp+vhBZqEABj0+6n5iUoFht3HNX9sElBNeAneqUE1wGXnWMlpvCmd2KlKYEf6yNpw==
X-Received: by 2002:a17:902:ec8b:b0:1dc:cf38:3a77 with SMTP id x11-20020a170902ec8b00b001dccf383a77mr11987995plg.55.1712586847421;
Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Received: from [10.203.16.62] ([124.156.217.146])
by smtp.gmail.com with ESMTPSA id u14-20020a170902e80e00b001e41c665992sm2562939plg.29.2024.04.08.07.34.06
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Message-ID: <6614005f.170a0220.5e155.5201@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:07 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0785335702796003275=="
MIME-Version: 1.0
Subject: Payment information letter of your order no HG911095DF
From: Stephanie Gotschall
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: TechWizMail [version 3.5]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============0785335702796003275==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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==
--===============0785335702796003275==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments