Geek Squad phish from Google / Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 26 Jul 2023 12:23:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qOj9t-000BT9-0X
for dave@doctor.nl2k.ab.ca;
Wed, 26 Jul 2023 12:22:49 -0600
Resent-From: The Doctor
Resent-Date: Wed, 26 Jul 2023 12:22:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f194.google.com ([209.85.222.194]:53693)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qOfWj-000GfK-1a
for sales@nk.ca;
Wed, 26 Jul 2023 08:30:16 -0600
Received: by mail-qk1-f194.google.com with SMTP id af79cd13be357-7659cb9c42aso552566785a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1690381684; x=1690986484;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=IgNMklSeYxtEc3N3UCyaHtegV9hfU4+AZQ2Vw5kBvCE=;
b=IpiL9fFhLzEDfdUFDvMf9I3cnLn7D4BYbT2cyf60xA6R2h4ESA+oMte/kS8h201ti/
vBo69GMjx2vyO+OP9rtvsYni4GP37No3UnKrw+B20ElAfKHDhqCILEe2Eg0pL1OiRZmU
L5zFMCoFRWuLujqFL7tus4gSCahPQMTNIDtLoOxOekNJoABkqun1lOoCrvJ8QoOy4IkP
2li452DgpYXfAvHEwja2LGswhNPhUuo7hpqwDZKSVKmahAEKcSr4ybrFBSd7g7aC5LZA
kPzqCa+N0VOVYFEF9lAkBN5fGhZ7jgE47FX1UqGZDFx5ueY9HcBQuf4S5b960wiKm0Tn
bG+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1690381684; x=1690986484;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=IgNMklSeYxtEc3N3UCyaHtegV9hfU4+AZQ2Vw5kBvCE=;
b=dr6VFLCA5Xi2ofZwJC/MmE6HGwvD0eFqYo9dt9Q2TtrZhZZy54t+oeAJMFG6C2eilD
BNqmYrrrjW08/Fs+XjRednmfbKR8Uj5/eqYn5staM8C95v5lGTzCvoeEkpF1pcKK7cVv
Fn/HahPedqk8+6x001FQLmMC73sCwHBmLxMMApT6XCNFJeckATXUYM0pZDwSDdHVOaiZ
yPo8RLzLDYu4UrKaMqw5zYz7iRXQtHbenb+Cv9sg10jO5bsVOcgl2iPssctd/IfZSEns
4cyNGqJ0VywU6tCo+32pCVHa9VXwPOmuwylgLtP8M2AMnUF8jbJiamlhpAMSq2H3Sabh
myGQ==
X-Gm-Message-State: ABy/qLYiatxXVTr0cz35ni6/gU+kOMXMbxBU2UyqQBZ+OyyB4uoDNXJw
dU5e1dtECq9kAlL/8G4ZcFp9Ky/udrJl9E0OjEUNzSSE
X-Google-Smtp-Source: APBJJlEabGb4nhuKB+Lxt5B9Kz3bARq+i/WRm/fW9MgRPhJUFlTRoy3U6achJttuTnpwpMb0NkTSmg==
X-Received: by 2002:a0c:a80a:0:b0:626:2bf5:d532 with SMTP id w10-20020a0ca80a000000b006262bf5d532mr1687514qva.14.1690381683947;
Wed, 26 Jul 2023 07:28:03 -0700 (PDT)
Received: from 64.44.84.36 ([45.88.220.238])
by smtp.gmail.com with ESMTPSA id b14-20020a0cb3ce000000b005dd8b9345b4sm5182441qvf.76.2023.07.26.07.28.02
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 26 Jul 2023 07:28:03 -0700 (PDT)
Message-ID: <64c12d73.0c0a0220.437f9.58f9@mx.google.com>
From: "Alfonso W. Bertie"
Subject: Order Confirmation Details#067354
To: "sales"
Content-Type: multipart/alternative; boundary="UaBWa=_nVjTCdCFtaLor9lx3ay9zsNqhE5"
MIME-Version: 1.0
Date: Wed, 26 Jul 2023 07:28:02 -0700
X-Antivirus: AVG (VPS 230726-4, 7/26/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--UaBWa=_nVjTCdCFtaLor9lx3ay9zsNqhE5
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hello Dear, sales@nk.ca
Annual Transaction: Successful!
This email is to remind you that your last-year PC Care subscription h=
as lapsed today.
As per our contract, your annual subscription (PC Care and Network Pro=
tection) has been successfully renewed and reactivated.
The subscription fee of $ 385.79 is automat=C3=ACcally debited from th=
e updated payment source; this amount will appear on the statement as =
a GKS*PC charge.
For any queries, please feel free to contact us toll-free at +1 855 26=
2 3380=20
Here is your order and transaction information:
Invoice number: 974-3881-7306741
Description: GEEK Total Protection
Current plan: one-year subscription
Payment method: automatic debit
Next renewal date: July 25, 2024
Subscription charge: $ 385.79
If you wish to unsubscribe or stop auto-debit payments and want a full=
refund to the original payment source, please reach out to us immedia=
tely to claim a d=C3=ACspute.
Customer Helpline Toll-Free Number: +1 855 262 3380
=20
regards,
Alfonso W. Bertie
Consumer Service Activation Dept.
--UaBWa=_nVjTCdCFtaLor9lx3ay9zsNqhE5
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hey Exist=
ing User, sales@nk.ca
tyle=3D"color: rgb(37, 37, 37);">Annual Transaction: Successful!
ng>
This emai=
l is to remind you that your last-year PC Care subscription has lapsed=
today.
As per ou=
r contract, your annual subscription (PC Care and Network Protection) =
has been successfully renewed and reactivated.
The subsc=
ription fee of $ 385.79 is automat=C3=ACcally debited from the updated=
payment source; this amount will appear on the statement as a GKS*PC =
charge.
For any q=
ueries, please feel free to contact us toll-free at
olor: rgb(37, 37, 37);">+1 855 262 3380
tyle=3D"color: rgb(37, 37, 37);">Here is your order and transaction in=
formation:
Invoice n=
umber: 974-3881-98621
Description=
: GEEK Total Protection
Current p=
lan: one-year subscription
Paymen=
t method: automatic debit
Next re=
newal date: July 25, 2024
Subscri=
ption charge: $ 385.79
If you wi=
sh to unsubscribe or stop auto-debit payments and want a full refund t=
o the original payment source, please reach out to us immediately to c=
laim a d=C3=ACspute.
Customer =
Helpline Toll-Free Number:
rgb(37, 37, 37); text-transform: none; text-indent: 0px; letter-spaci=
ng: normal; font-family: "Times New Roman"; font-size: medium; font-st=
yle: normal; font-weight: 700; word-spacing: 0px; white-space: normal;=
orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-var=
iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke=
-width: 0px; text-decoration-thickness: initial; text-decoration-style=
: initial; text-decoration-color: initial;'>+1 855 262 3380
p>
>
sincerely=
,
Alfonso W=
=2E Bertie
Client Support Team
>
--UaBWa=_nVjTCdCFtaLor9lx3ay9zsNqhE5--