Geek Squad phish from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Jul 2023 16:16:50 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJLdw-0008AZ-2a

for dave@doctor.nl2k.ab.ca;

Tue, 11 Jul 2023 16:15:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Jul 2023 16:15:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f170.google.com ([209.85.222.170]:52241)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJIRF-000J0L-0o

for sales@nk.ca;

Tue, 11 Jul 2023 12:50:20 -0600

Received: by mail-qk1-f170.google.com with SMTP id af79cd13be357-765a1690003so484660485a.0

for ; Tue, 11 Jul 2023 11:48:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689101294; x=1691693294;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=nCH8tAVsOp5Ss4K4KERV0X9nJDzTSK20MWl64t45GWU=;

b=Cl9OUJFN/CC5h0DzUBMJR7I6pBHSQixwJQ3EHIunNNE+ItkaoYaSsPTsnnq7sY2DSp

0B4uTjMRfom+2HcGjFJTHGVAT37efN02nnl/BKjb3yad80at/qmxpbx73R67qrjql6BJ

IhF3B+LVWwAwSMdjuw7t5TQLhqKODoDBGMiq/zFgo99G3ojRi/Slz2+Y0u3zit1X/toG

8WxgUkU8gLOqsRjLvRbePOeVSmqrER1E7Zl+CfSZyXQ7Y/pnllmwI9qkF5G8mdkMgBJy

4t/GaFmLfZvmVjMt8/SzFDlhLDvQtTW6AMa+X8a7oZKAsD3JnK8G+po8QykvzF8dI+99

wVmg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689101294; x=1691693294;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=nCH8tAVsOp5Ss4K4KERV0X9nJDzTSK20MWl64t45GWU=;

b=jvq4s80fraQBGWWtmbw5tUE0V2j3w26dEPEeMDOYhY5KJS+cw8kikEfEhH4FtyAeF+

HtdrcCR2RbtmDY5OuratXImiakhXfF/gIaD6EyXvHEE0UFvc/ZiDiffm5MmEjk2JhUW0

Bwdc7XBmmm1Kb+KtuyxLNemCcQML1FaWQK8g/3sx9golJwnrZR1UmVt+qtyz/EJXpPKd

P0AdU2KOL8XdDC9lPHTfZCTizbN8S75B/v7IyGYQ5GBaoE68NIBJmuqd49oYpVRqEf5l

RpS+6pS0RTajax2JRI6kQuF/34lJePPE20e9SlWAgOPYwnX7b+DdCO+6ncHCXOgZaM9x

4ujA==

X-Gm-Message-State: ABy/qLZGoa14JSAfnGAoHna1b3O5fo3QQdIqGO2p7S5aS0LGBXKWrW5C

OPRfXR2/Zi/QcWVBgkl2qY1oZEiTJ9vKZS/N5Gw=

X-Google-Smtp-Source: APBJJlGVHAq2ihN9ICnTgesP1uIQK1GLohElySFw/HdVjLdJifg2j5Xog8MlVF0TfRsm+8q6k1ER5w==

X-Received: by 2002:a05:620a:3186:b0:765:3e81:e74c with SMTP id bi6-20020a05620a318600b007653e81e74cmr18596348qkb.21.1689101294395;

Tue, 11 Jul 2023 11:48:14 -0700 (PDT)

Received: from 45.14.195.117 ([45.14.195.117])

by smtp.gmail.com with ESMTPSA id c13-20020a0cf2cd000000b0060530c942f4sm1387245qvm.46.2023.07.11.11.48.12

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 11 Jul 2023 11:48:14 -0700 (PDT)

Message-ID: <64ada3ee.0c0a0220.70811.4724@mx.google.com>

From: "Mack S. Morse"

Subject: Yearly membership plan update

To: "sales"

Content-Type: multipart/alternative; boundary="P9BWWE1sK8B4fZ7A1fDs=_lm7mtwJpekXz"

MIME-Version: 1.0

Organization: Online Service Support manager

Date: Tue, 11 Jul 2023 19:48:14 +0100



This is a multi-part message in MIME format



--P9BWWE1sK8B4fZ7A1fDs=_lm7mtwJpekXz

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello Client, sales@nk.ca



Thank you again for your order!



We are glad to see you registering with us and choosing us as your pre=

ferred PC Care and Network Security provider.



This year's subscription plan renewed on July 11, 2023, and it will be=

valid until July 10, 2024, unless you choose to unsubscribe or drop t=

he charges.



The annual fee of $ 398.99 has been automatically withdrawn from the s=

ame payment source updated in our records, which will reflect on the s=

tatement shortly.



=C3=8Dnformation on annual subscriptions and orders:



Customer Unique ID: 98293157MKTT

Seller's name: GEEK Squad Inc.

Devices covered: 5 devices only.

Payment mode: Auto debit

Order Total: $ 398.99



Please be noted that the annual recurring charge will be automatically=

debited every year until you decide to cancel, as you opted for auto-=

debit payments last year.



Please feel free to call us toll-fr=C3=ABe at [+1 833 [328] 5706] if y=

ou need to cancel or get a refund.





=20



We are thankful to you,



Mack S. Morse

Invoice Head Support manager

Toll-free Number: [+1 833 [328] 5706]





--P9BWWE1sK8B4fZ7A1fDs=_lm7mtwJpekXz

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline














Times New Roman", Times, serif; font-size: 15px;'>Hello User, sales@nk=

=2Eca




Times New Roman", Times, serif; font-size: 15px;'>Thank you again for =

your order!




Times New Roman", Times, serif; font-size: 15px;'>We are glad to see y=

ou registering with us and choosing us as your preferred PC Care and N=

etwork Security provider.




Times New Roman", Times, serif; font-size: 15px;'>This year's subscrip=

tion plan renewed on July 11, 2023, and it will be valid until July 10=

, 2024, unless you choose to unsubscribe or drop the charges.
p>


Times New Roman", Times, serif; font-size: 15px;'>The annual fee of $ =

398.99 has been automatically withdrawn from the same payment source u=

pdated in our records, which will reflect on the statement shortly.
pan>




Times New Roman", Times, serif; font-size: 15px;'>=C3=8Dnforma=

tion on annual subscriptions and orders:




Times New Roman", Times, serif; font-size: 15px;'>Customer Unique ID: =

11654901MKTT
Seller's name: GEEK =

Squad Inc.
Devices covered: 5 dev=

ices only.
Payment mode: Auto deb=

it
Order Total: $ 398.99
p>


Times New Roman", Times, serif; font-size: 15px;'>Please be noted that=

the annual recurring charge will be automatically debited every year =

until you decide to cancel, as you opted for auto-debit payments last =

year.




Times New Roman", Times, serif; font-size: 15px;'>Please feel free to =

call us toll-fr=C3=ABe at 
49, 47);">[+1 833 [328] 5706] if you need to cancel or=

get a refund.




Times New Roman", Times, serif; font-size: 15px;'> 




Times New Roman", Times, serif; font-size: 15px;'>Thanks for visit aga=

in,




Times New Roman", Times, serif; font-size: 15px;'>Mack S. Morse

le=3D"color: rgb(37, 37, 37);">Invoice Head Support manager

"color: rgb(37, 37, 37);">Toll-free Number: 
style=3D'color: rgb(184, 49, 47); font-family: "Times New Roman", Time=

s, serif; font-size: 15px;'>[+1 833 [328] 5706]













--P9BWWE1sK8B4fZ7A1fDs=_lm7mtwJpekXz--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA