Geek Squad phish from gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Apr 2023 08:14:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1prJPH-0007PK-9c
for dave@doctor.nl2k.ab.ca;
Tue, 25 Apr 2023 08:12:35 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Apr 2023 08:12:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f50.google.com ([209.85.210.50]:51348)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1prIx5-000E2c-Qo
for sales@netknow.ca;
Tue, 25 Apr 2023 07:43:33 -0600
Received: by mail-ot1-f50.google.com with SMTP id 46e09a7af769-6a5d9853d97so2259460a34.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682430083; x=1685022083;
h=date:organization:mime-version:to:subject:from:message-id:from:to
:cc:subject:date:message-id:reply-to;
bh=zOGPRQQ2Qd+6hgPuB9rultmVUV0gCwIrco38ep2JL2g=;
b=T+uBE84lnYCge4YpQ8K8FS+vhP35h0yGO1/UofDMHcStc7rYkpbLG/2jbwCAHXtq9F
mxLkrojyfBf51ZDFe1sbUYdlTTwxM8Zwhr/nqWNvkwEOI3M3GZRSsKBuwV1qvra4pWKF
sYuHdJiu7PqK/ZIr+Z8iQ0yemsn45wQEnIcgwMDnqWQqkvrfiG4L+2ntTZ3eupAfR8Wz
W1loe8OIwHMBoyNBk3pDMp444cS1CBZ2jHXzqChHcgZiWdTFp2h6CIlXbRg5gL9aZFHL
mFGJTgHhvG2AX2C+8hf4tga0VPN5VWlrmkumCH5x0vpxp7NMHvsiXQwOUFjJSyhuhMQj
xjWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682430083; x=1685022083;
h=date:organization:mime-version:to:subject:from:message-id
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=zOGPRQQ2Qd+6hgPuB9rultmVUV0gCwIrco38ep2JL2g=;
b=Q2HY6OD+VwABy/5M4jBqh9ld3EI8AjwxJKs7xR9KAo1hHy056d20c5/Msi/Y+JXi+j
bFd5CeHoJBx3xbuGxax/sFp0OhtdGXiL2/y9yHGZsl9mjVanJn38YosZD4m/8q34T8B6
oGNv8YTLNTI7zrNFekaplTXe6nTdqm2MFBr2IS1+++ZFYS7rFtuOIzTyBglhFxF2/s1V
ywbJMmNdfCNfOQBt3qXUQ6XBOzUelPX/VlXJLMb2ekAwi8+cBGRwqCYDmhhsD5Ql0CCa
xRZkRDjW9NAaqfCOeSgez8UWZZT6bQrxK4I9tEONkDGnMDsrT6urvf6hoGy/S4IoW5N4
/5Fg==
X-Gm-Message-State: AAQBX9ccBXbuarJhFjCBwt+x+jETUvNXA8bRThAEeRa1cWimr55uAvR9
0Axgt5M5Y0FLT3vwO8/6WTaZwEsQPkgHQQ==
X-Google-Smtp-Source: AKy350Y0IvcLrgTARymyyzSYWShvVvj9rq8AzihFDe8kZo9uujOidcl1mFRlZPtoqGT9VUtRk+8gDg==
X-Received: by 2002:a9d:66c1:0:b0:68d:6a1e:46b9 with SMTP id t1-20020a9d66c1000000b0068d6a1e46b9mr8638727otm.26.1682430083189;
Tue, 25 Apr 2023 06:41:23 -0700 (PDT)
Received: from 145.14.135.38 ([145.14.135.34])
by smtp.gmail.com with ESMTPSA id e21-20020a9d5615000000b006a662e9f074sm2065111oti.58.2023.04.25.06.41.21
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 25 Apr 2023 06:41:22 -0700 (PDT)
Message-ID: <6447d882.9d0a0220.c4e09.a016@mx.google.com>
From: "Taliyah Moon"
Subject: Check your account statement#843078
To: "sales"
Content-Type: multipart/alternative; boundary="Masio=_98I0yre3R8BEiu8v2ylQyhmPLk2"
MIME-Version: 1.0
Organization: Geek Online Helpdesk
Date: Tue, 25 Apr 2023 06:41:22 -0700
This is a multi-part message in MIME format
--Masio=_98I0yre3R8BEiu8v2ylQyhmPLk2
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hello User, sales@netknow.ca
Annual Transaction Successful!
We are glad to see you again for reactivating your annual PC subscript=
ion plan with us.
You have received this email because you subscribed for PC and Network=
Protection services last year which expired yesterday.
So as you have opted for direct debit, we have debited your bank accou=
nt with ($ 385.99) and resumed the services again for one year.
This annual subscription will remain active until (April, 24, 2024) un=
less you contact us to cancel the subscription or void all the charges=
=2E
Customer Support Tollfree # +1 (833) 852 0692
Order Information: -
Customer Unique ID: 538-1393-25626
Seller's Name: G=C3=AAek - Squ=C3=A4d Tech
Advanced PC and Network Shield
Subscription Fee: $ 385.99
If you find an error in this transaction or you wish to unsubscribe an=
d get the full amount refunded back to the original payment source, pl=
ease contact us.
Thank you for trust with us
Taliyah Moon
Geek Online Helpdesk
Tollfree # +1 (833) 852 0692
--Masio=_98I0yre3R8BEiu8v2ylQyhmPLk2
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear Custome=
r, sales@netknow.ca
Annual Transaction
ong>Successful!
We are glad to see you again for reac=
tivating your annual PC subscription plan with us.
You have received this email because =
you subscribed for PC and Network Protection services last year which =
expired yesterday.
So as you have opted for direct debit=
, we have debited your bank account with ($ 385.99) and resumed the se=
rvices again for one year.
This annual subscription will remain =
active until (April, 24, 2024) unless you contact us to cancel the sub=
scription or void all the charges.
Customer Support Tollfree # +=
1 (833) 852 0692
Order Information: -=
Customer Unique ID: 681-4601-67741
>Seller's Name: G=C3=AAek - Squ=C3=A4d Tech
Advanced PC and Network=
Shield
ext-indent: 0px; letter-spacing: normal; font-family: "Times New Roman=
"; font-size: medium; font-style: normal; font-weight: 400; word-spaci=
ng: 0px; float: none; display: inline !important; white-space: normal;=
orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-var=
iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke=
-width: 0px; text-decoration-thickness: initial; text-decoration-style=
: initial; text-decoration-color: initial;'>Subscription Fee: $ 385.99=
If you find an error in this transact=
ion or you wish to unsubscribe and get the full amount refunded back t=
o the original payment source, please contact us.
We are thankful to you
Taliyah Moon
Geek Online Helpdesk<=
br>Tollfree # +1 (833) 852 0692
>
--Masio=_98I0yre3R8BEiu8v2ylQyhmPLk2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments