Domain name selling phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnh4x-00000000FXR-3Cu2

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 09:45:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 09:45:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f45.google.com ([209.85.216.45]:54499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rngxq-00000000Eoh-0IKV

for sales@nk.ca;

Fri, 22 Mar 2024 09:37:53 -0600

Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-2a02c4dffd2so1154108a91.0

for ; Fri, 22 Mar 2024 08:35:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711121749; x=1711726549; darn=nk.ca;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=LdUAHAoVn5jEhLTg/TmB9lq7bxMur2jp4VZABWFS5NiUm5zshnySx0whWdcFjU6v+1

XKJxZYZqSU5e4ckv4GKrxDLktj2i6VSQgDVPLXlNpDqVI1+1eMdeygqGFLc5P2ACzBlV

60Yd80eZnj65RAk5WzcQwHystIZrwJ3cQuxyCvrmSmJy4/prq1FWONhGh+VQSDqx863p

SxjG+nggr/oRJTCKf0PmiMqSXci8GSfXLL6sge6sMILs9ZmAsQXq0EwkMvIC98tTW2vd

IIll6I93yaCWnEid77XCOYVfEZ18b8Fcssp78KESFYUnMqQknjfZ8zbBkeN24yaBbkPc

KdsQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711121749; x=1711726549;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=IWld1uY7wc221sjfWDFm9f7jKnWQ/B4Bpsb2hIDP2dQGOOl0d5Lfo7IJGSXY7O7OA+

8FblC59B+WVjyrs8LGeflKnXO6qULRbnnAhLD+ec/RF8bnk4F3JZ0rcDMR3PkqBpRlrI

zgHXyaSv8SOtjf20JDDnNDxU3uTiJuQFThkgoJ2FTw6DKB0YxjuP9yXTGt4gq5Pc7ioN

4q43HYlgOhJSHJRtPDJcgh3zhXwmF2R2c2UPuj35v4rKW77IB98dD9ReuSgicY3eek4L

QnA9qbIoAywXx+peoFrzmO18QrR2ZNkh4EUT/5F24RXXu24J4jtnRZviI8cVy8dKVsFL

LS6w==

X-Gm-Message-State: AOJu0YwF3O0TZtiTGwyIPEDY9KlB/inOe0rBHQHREltd8L3JJNFqWWFy

XXUoYJia3UsnfeimiTMLtHUvtqjvKSf6Fz/a4FCds5l8PBsh41drI+JzqakVf5xUlV1AELNC7Jj

cYv0bukouQl1mlGldcwjNnuBtQUDdAVBkynQ=

X-Google-Smtp-Source: AGHT+IFKz/VpBVvEWL9PEIAxoTXs2sSX7ONKuXoOvmST6Od6Mxl8AKNUKj3qLhXdaVNABTgwIeFJH2tj3BK9juPAY+Y=

X-Received: by 2002:a17:90a:1597:b0:29f:6d8d:da34 with SMTP id

m23-20020a17090a159700b0029f6d8dda34mr2518818pja.24.1711121749058; Fri, 22

Mar 2024 08:35:49 -0700 (PDT)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Fri, 22 Mar 2024 08:35:48 -0700

MIME-Version: 1.0

From: George Pat

X-Streak-Sequence-Data: action-key=acn_B4Iua2ueXiSvJH8I5g; recipient-key=rcp_B4ItDP_0NOADwKu4hA

In-Reply-To:

References:



Date: Fri, 22 Mar 2024 08:35:48 -0700

Message-ID:

Subject: Alberta Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000052a0e0614419423"



--000000000000052a0e0614419423

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



We have decided to sell the domain name www.BroadbandAlberta.com for a

discounted price of $350 as against the previous price



Interested, do click on the check out option in the link above



Best Regards

On Mon, Mar 11, 2024 at 03:21 PM George Pat wrote:



> Hello

>

> Hope you're doing well

>

> We're listening to offers on the domain name www.BroadbandAlberta.com

>

> What is your best price of this domain?

>

> Looking forward to hearing from you

> On Wed, Mar 6, 2024 at 03:22 PM George Pat wrote:

>

>> Hello

>>

>> Leverage on the opportunity to purchase this web domain

>> www.BroadbandAlberta.com today to expand your online presence and let it

>> serve as an online marketing tool for you

>>

>> Purchase instantly for $550

>>

>> Let me know your thoughts on this

>>

> =E1=90=A7



--000000000000052a0e0614419423

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

We have decided to sell the domain name
ref=3D"http://www.BroadbandAlberta.com">www.BroadbandAlberta.com
for a =

discounted price of $350 as against the previous price

Interested, =

do click on the check out option in the link above
=C2=A0
Best Regar=

ds


On Mon, Ma=

r 11, 2024 at 03:21 PM George Pat <
om">geogepat200@gmail.com
> wrote:

l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=

4,204);padding-left:1ex">


Hello



Hope you're doing well



We're listening to offers on the domain name
adbandAlberta.com">www.BroadbandAlberta.com




What is your best price of this domain?



Looking forward to hearing from you








On Wed, Mar 6, 2024 at 03:22 PM George Pat <
200@gmail.com">geogepat200@gmail.com
> wrote:





-left:1px solid rgb(204,204,204);padding-left:1ex">





Hello



Leverage on the opportunity to purchase this web domain
p://www.BroadbandAlberta.com">www.BroadbandAlberta.com
today to expand =

your online presence and let it serve as an online marketing tool for you <=

br>


Purchase instantly for $550



Let me know your thoughts on this









height:1px">3D""
" src=3D"https://mailfoogae.appspot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWw=

uY29t&type=3Dzerocontent&guid=3D797ec705-7e9e-4186-8ac5-a5df1d9c17d=

f">=E1=90=A7




--000000000000052a0e0614419423--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA