Geek Squad mail scanning service phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Feb 2024 13:10:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rX4nf-00000000AJz-348S
for dave@doctor.nl2k.ab.ca;
Mon, 05 Feb 2024 12:38:39 -0700
Resent-From: The Doctor
Resent-Date: Mon, 5 Feb 2024 12:38:39 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f44.google.com ([209.85.128.44]:46409)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rX1Oy-00000000NnD-0BGa
for doctor@doctor.nl2k.ab.ca;
Mon, 05 Feb 2024 09:00:59 -0700
Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-40fe0471c39so324215e9.1
for; Mon, 05 Feb 2024 07:59:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707148735; x=1707753535; darn=doctor.nl2k.ab.ca;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=dnK3G/5Q6Uw1UhNVWIfcBL6U0PbT885mWb4/smT7v5M=;
b=LqRcDQHebQAfY3PFvN5mvXj6AdGN0RsaX+myNWThnt6UD0Q/euDbWMlhlQWfCKfvjR
91VycXz2jY1H3K+uSY6pMWNoFk6rhBoPLCbtnFWKxm4P+xZya+DmhRzkbSDDFebykZQI
5gOfW2Fh9mDehnJLnBfti2OllSqPZVNFEBsxr1t51mHybkjem5izLsG8TtjMMPD3pzRD
KN1m+OJn7zojO2TTJCHihb8MyM5WCucyP6neZLGIZao4VxUiPfaVSbZ58qf6MkPaQ6Ji
7cdMAy5SjeL7b4bLUA6hWlNU4a6tYKZ1b7ptAl/5v8pTmnXGv4gdNhrRWK9mGcLXTQ2c
hCMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707148735; x=1707753535;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dnK3G/5Q6Uw1UhNVWIfcBL6U0PbT885mWb4/smT7v5M=;
b=g+03k81JXudJqJCS56O/0wt7FX6IM8afFHCVfX/ImQOvEVWCt9Ce9JEhJkgnyZDwBv
nfYlaDNYbR1nlcoeHlR3RDjdQhCoyVwxrLEYO6TWebFsTbhtK+NWA5HwxaCIu9HFKOmR
Z1y4qQvUqKPJkzgHw3NJP4v/k2q4gKYwGCPnSjgeFYt/o8Lgn9MHM4bn3rpTjH7k9vro
8wTMDvEAhA97jonMizlQaqhIwPbnB3NR2z6mqSpQoETPigAKMkktJnlpm+7lquQ6xUNv
+hNyki6DBVfh00aGWamRknXluB4WwqvXSEEFRrd89S13a+YpiaMumqm/VA/tFiGFNFeV
7x9g==
X-Gm-Message-State: AOJu0Yxp+8tZ/5nN4fIvynOeQg1IL/btthPD3IutbbGoleG5GkWuKDJL
/15L8nvq9q3njfYgJ5OWvKVZF9qPyAaFamgdBjimuOH4o98aIw6X/fYvd6ZKWBS5QbQY4Bs=
X-Google-Smtp-Source: AGHT+IGJs9S2DIiMhs6gRoWGNYG68LAVQh0SbUK/hSHujW4W+TWXaK8TEJtPUcZiEOLRADBDfbWcvQ==
X-Received: by 2002:a5d:54d2:0:b0:33a:f681:699e with SMTP id x18-20020a5d54d2000000b0033af681699emr8397597wrv.21.1707148734498;
Mon, 05 Feb 2024 07:58:54 -0800 (PST)
Received: from 82-132-238-25.dab.02.net (82-132-238-25.dab.02.net. [82.132.238.25])
by smtp.gmail.com with ESMTPSA id y18-20020adfe6d2000000b0033af81d6dc8sm8347266wrm.87.2024.02.05.07.58.43
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 05 Feb 2024 07:58:54 -0800 (PST)
Message-ID: <65c105be.df0a0220.1874b.5825@mx.google.com>
From: "Gussie R Sanchez"
Subject: Secure Confirmation of Your E-Bill #7OTLNM0
To: doctor@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO"
MIME-Version: 1.0
Organization: cc
Date: Mon, 5 Feb 2024 21:28:34 +0530
This is a multi-part message in MIME format
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Subscription Renewal Confirmation=20
Greetings, DOCTOR@DOCTOR.NL2K.AB.CA
It's our pleasure to confirm the renewal of your subscription. Your tr=
ust in our digital security solutions is greatly appreciated.
=20
Invoice Date & Time:
05-02-2024 at 21:28:33
Invoice ID:
#UJGYQY
Product:
Endpoint Security with Apex One
Quantity:
1
Unit Price:
$889.00
Total:
$889.00
Payment Status:
Processed Successfully
Transaction Update:
Your statement will display this transaction within 48 hours.
Need Assistance?
Our Customer Service team is here to help you with any inquiries or su=
pport you might need.
Contact Us: +1 | 844 | 677~1994
Refund & Cancellation Policy:
Your satisfaction is our top priority. For any concerns, please reach =
out to us for a prompt resolution in line with our policies.
Regards,
Gussie R Sanchez
Geek Squad=E2=84=A2 help representatives
+1 | 844 | 677~1994
=C2=A9 2024 Geek Squad, Inc. All rights reserved.=20
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
cale=3D1.0">
Subscription Renewal Confirmation
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Feb 2024 13:10:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rX4nf-00000000AJz-348S
for dave@doctor.nl2k.ab.ca;
Mon, 05 Feb 2024 12:38:39 -0700
Resent-From: The Doctor
Resent-Date: Mon, 5 Feb 2024 12:38:39 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f44.google.com ([209.85.128.44]:46409)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rX1Oy-00000000NnD-0BGa
for doctor@doctor.nl2k.ab.ca;
Mon, 05 Feb 2024 09:00:59 -0700
Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-40fe0471c39so324215e9.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707148735; x=1707753535; darn=doctor.nl2k.ab.ca;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=dnK3G/5Q6Uw1UhNVWIfcBL6U0PbT885mWb4/smT7v5M=;
b=LqRcDQHebQAfY3PFvN5mvXj6AdGN0RsaX+myNWThnt6UD0Q/euDbWMlhlQWfCKfvjR
91VycXz2jY1H3K+uSY6pMWNoFk6rhBoPLCbtnFWKxm4P+xZya+DmhRzkbSDDFebykZQI
5gOfW2Fh9mDehnJLnBfti2OllSqPZVNFEBsxr1t51mHybkjem5izLsG8TtjMMPD3pzRD
KN1m+OJn7zojO2TTJCHihb8MyM5WCucyP6neZLGIZao4VxUiPfaVSbZ58qf6MkPaQ6Ji
7cdMAy5SjeL7b4bLUA6hWlNU4a6tYKZ1b7ptAl/5v8pTmnXGv4gdNhrRWK9mGcLXTQ2c
hCMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707148735; x=1707753535;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dnK3G/5Q6Uw1UhNVWIfcBL6U0PbT885mWb4/smT7v5M=;
b=g+03k81JXudJqJCS56O/0wt7FX6IM8afFHCVfX/ImQOvEVWCt9Ce9JEhJkgnyZDwBv
nfYlaDNYbR1nlcoeHlR3RDjdQhCoyVwxrLEYO6TWebFsTbhtK+NWA5HwxaCIu9HFKOmR
Z1y4qQvUqKPJkzgHw3NJP4v/k2q4gKYwGCPnSjgeFYt/o8Lgn9MHM4bn3rpTjH7k9vro
8wTMDvEAhA97jonMizlQaqhIwPbnB3NR2z6mqSpQoETPigAKMkktJnlpm+7lquQ6xUNv
+hNyki6DBVfh00aGWamRknXluB4WwqvXSEEFRrd89S13a+YpiaMumqm/VA/tFiGFNFeV
7x9g==
X-Gm-Message-State: AOJu0Yxp+8tZ/5nN4fIvynOeQg1IL/btthPD3IutbbGoleG5GkWuKDJL
/15L8nvq9q3njfYgJ5OWvKVZF9qPyAaFamgdBjimuOH4o98aIw6X/fYvd6ZKWBS5QbQY4Bs=
X-Google-Smtp-Source: AGHT+IGJs9S2DIiMhs6gRoWGNYG68LAVQh0SbUK/hSHujW4W+TWXaK8TEJtPUcZiEOLRADBDfbWcvQ==
X-Received: by 2002:a5d:54d2:0:b0:33a:f681:699e with SMTP id x18-20020a5d54d2000000b0033af681699emr8397597wrv.21.1707148734498;
Mon, 05 Feb 2024 07:58:54 -0800 (PST)
Received: from 82-132-238-25.dab.02.net (82-132-238-25.dab.02.net. [82.132.238.25])
by smtp.gmail.com with ESMTPSA id y18-20020adfe6d2000000b0033af81d6dc8sm8347266wrm.87.2024.02.05.07.58.43
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 05 Feb 2024 07:58:54 -0800 (PST)
Message-ID: <65c105be.df0a0220.1874b.5825@mx.google.com>
From: "Gussie R Sanchez"
Subject: Secure Confirmation of Your E-Bill #7OTLNM0
To: doctor@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO"
MIME-Version: 1.0
Organization: cc
Date: Mon, 5 Feb 2024 21:28:34 +0530
This is a multi-part message in MIME format
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Subscription Renewal Confirmation=20
Greetings, DOCTOR@DOCTOR.NL2K.AB.CA
It's our pleasure to confirm the renewal of your subscription. Your tr=
ust in our digital security solutions is greatly appreciated.
=20
Invoice Date & Time:
05-02-2024 at 21:28:33
Invoice ID:
#UJGYQY
Product:
Endpoint Security with Apex One
Quantity:
1
Unit Price:
$889.00
Total:
$889.00
Payment Status:
Processed Successfully
Transaction Update:
Your statement will display this transaction within 48 hours.
Need Assistance?
Our Customer Service team is here to help you with any inquiries or su=
pport you might need.
Contact Us: +1 | 844 | 677~1994
Refund & Cancellation Policy:
Your satisfaction is our top priority. For any concerns, please reach =
out to us for a prompt resolution in line with our policies.
Regards,
Gussie R Sanchez
Geek Squad=E2=84=A2 help representatives
+1 | 844 | 677~1994
=C2=A9 2024 Geek Squad, Inc. All rights reserved.=20
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
cale=3D1.0">
Subscription Renewal Confirmation
Greetings, DOCTOR@DOCTOR.NL2K.AB.CA
It's our pleasure to confirm the renewal of your subscr=
iption. Your trust in our digital security solutions is greatly apprec=
iated.
| Invoice Date & Time: | 05-02-2024 at 21:28:33 |
|---|---|
| Invoice ID: | #51AZR2 |
| Product: | MailScan Deep Discovery Inspector | =
| Quantity: | 1 |
| Unit Price: | $766.00 |
| Total: | $76= 6.00 |
| Payment Status: | Proc= essed Successfully |
| Transaction Update: | Your statement will display this trans= action within 48 hours. |
Need Assistance?
Our Customer Service team is here to help you with any =
inquiries or support you might need.
Contact Us: +1 [ 844 ] 677^1994
=Refund & Cancellation Policy:<=
/p>
Your satisfaction is our top priority. For any conc=
erns, please reach out to us for a prompt resolution in line with our =
policies.
Best regards,
Gussie R Sanchez
Geek Squad=E2=84=
=A2 support representatives
+1 [ 844 ] 677^1994
--I5Ijn5dmux=_VoOtv8yNHa8XBlyDI7S6dO--