McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtqKk-0000000027f-3fdS
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f177.google.com ([209.85.214.177]:45385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtq6i-000000000uS-4AV6
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:28 -0600
Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-1e3dda73192so10142185ad.3
for; Mon, 08 Apr 2024 07:34:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586865; x=1713191665; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=IMPLQGLwdRRGg7HOveKA3SYndAaPIQ9Z7/Zo+MfxNbGFxgCI8CW1QYYoHIlwWUYt/j
F7LPBXQClpmRWEdugaTdRAALrhaQF7QX57ruewL1ahk/Cw70Nzxe7MwrP+depC2yY+KO
h9/r7CdlnP4bIhSQII/HT2rs4wYfMvEGkTU8x5IdMJ/vVEVHllW+0DcRXAaaoYL6gFxq
QyhAfwy+S2lah2uUrUCpXlfdZGUe0hSTjCQNCe0PPE00IGuKziafUoXxvYAgrCKHaBjw
kXOGDre+DgC+rSoIYeC0zkA1wsuxbkD07LyhwdMGjxt1ZaLVOpiwuCKQCt8J2vTNkKIQ
h++w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586865; x=1713191665;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=cin3nqAZEyVvSiOPF8uEIHwR5ypFaSqXEisTR6dEYZ+ULjv4Bvhh/o8mons6xBi/2y
BAMOCupZ07o3ADjMY5Ds0ZJkpSa9bo8xOonLk5Cxd1WR2hITpYdKYvul/111vUUXDzQu
Jl8h+qbEybwyHoRgJTlYqFpQH2eZaJaMPHvvObKzVXUCO72ejdMWTY8YcyIc1oogim33
xfDPRz1lKa6w7p5grEXpVz724oAetDy0qBuDzVrMYRsmhJECIN3NhuUUUKBsS/fJ7IoR
n5RPShDAI/ieY6VeXBOOxUkiG+A/mDZEFC5yEMvcckY9WAi59XMbz5kijT9Y7rWycx7r
u+Bg==
X-Gm-Message-State: AOJu0Yy0ni4cU2sNNS6TQRYsU1ASKQBsVL91UHw58L/yg7RqMowSe6ke
FTcHwRlcJL5YftV2iibX4prQ6Ef4aohEN3j5oKlN75oE2H1n9gyC3o7oPwETE5xDlA==
X-Google-Smtp-Source: AGHT+IGqKnoYmqHxrhY2zwP2NnqAZ1E2Vnw6EKEWwLm7Z7PD25UunF5wy5X0gO0EYcXoj4Xry5Z/CQ==
X-Received: by 2002:a17:903:94d:b0:1e4:49:de46 with SMTP id ma13-20020a170903094d00b001e40049de46mr3555257plb.47.1712586864596;
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Received: from [10.203.16.123] ([43.128.224.38])
by smtp.gmail.com with ESMTPSA id e12-20020a170902d38c00b001e250e630ffsm7045023pld.237.2024.04.08.07.34.23
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Message-ID: <66140070.170a0220.74acf.2161@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8218412906161064892=="
MIME-Version: 1.0
Subject: Order Confirmation: Your Purchase Completed RH712050NH
From: Jonathan Schlaudraff
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============8218412906161064892==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============8218412906161064892==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtqKk-0000000027f-3fdS
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f177.google.com ([209.85.214.177]:45385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtq6i-000000000uS-4AV6
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:28 -0600
Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-1e3dda73192so10142185ad.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586865; x=1713191665; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=IMPLQGLwdRRGg7HOveKA3SYndAaPIQ9Z7/Zo+MfxNbGFxgCI8CW1QYYoHIlwWUYt/j
F7LPBXQClpmRWEdugaTdRAALrhaQF7QX57ruewL1ahk/Cw70Nzxe7MwrP+depC2yY+KO
h9/r7CdlnP4bIhSQII/HT2rs4wYfMvEGkTU8x5IdMJ/vVEVHllW+0DcRXAaaoYL6gFxq
QyhAfwy+S2lah2uUrUCpXlfdZGUe0hSTjCQNCe0PPE00IGuKziafUoXxvYAgrCKHaBjw
kXOGDre+DgC+rSoIYeC0zkA1wsuxbkD07LyhwdMGjxt1ZaLVOpiwuCKQCt8J2vTNkKIQ
h++w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586865; x=1713191665;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=cin3nqAZEyVvSiOPF8uEIHwR5ypFaSqXEisTR6dEYZ+ULjv4Bvhh/o8mons6xBi/2y
BAMOCupZ07o3ADjMY5Ds0ZJkpSa9bo8xOonLk5Cxd1WR2hITpYdKYvul/111vUUXDzQu
Jl8h+qbEybwyHoRgJTlYqFpQH2eZaJaMPHvvObKzVXUCO72ejdMWTY8YcyIc1oogim33
xfDPRz1lKa6w7p5grEXpVz724oAetDy0qBuDzVrMYRsmhJECIN3NhuUUUKBsS/fJ7IoR
n5RPShDAI/ieY6VeXBOOxUkiG+A/mDZEFC5yEMvcckY9WAi59XMbz5kijT9Y7rWycx7r
u+Bg==
X-Gm-Message-State: AOJu0Yy0ni4cU2sNNS6TQRYsU1ASKQBsVL91UHw58L/yg7RqMowSe6ke
FTcHwRlcJL5YftV2iibX4prQ6Ef4aohEN3j5oKlN75oE2H1n9gyC3o7oPwETE5xDlA==
X-Google-Smtp-Source: AGHT+IGqKnoYmqHxrhY2zwP2NnqAZ1E2Vnw6EKEWwLm7Z7PD25UunF5wy5X0gO0EYcXoj4Xry5Z/CQ==
X-Received: by 2002:a17:903:94d:b0:1e4:49:de46 with SMTP id ma13-20020a170903094d00b001e40049de46mr3555257plb.47.1712586864596;
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Received: from [10.203.16.123] ([43.128.224.38])
by smtp.gmail.com with ESMTPSA id e12-20020a170902d38c00b001e250e630ffsm7045023pld.237.2024.04.08.07.34.23
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Message-ID: <66140070.170a0220.74acf.2161@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8218412906161064892=="
MIME-Version: 1.0
Subject: Order Confirmation: Your Purchase Completed RH712050NH
From: Jonathan Schlaudraff
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============8218412906161064892==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============8218412906161064892==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments