Geek Squad phish from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Jul 2023 14:07:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qK2YY-0008Tx-06

for dave@doctor.nl2k.ab.ca;

Thu, 13 Jul 2023 14:04:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Jul 2023 14:04:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f180.google.com ([209.85.219.180]:44049)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJzFQ-00057q-0R

for root@nl2k.ab.ca;

Thu, 13 Jul 2023 10:32:58 -0600

Received: by mail-yb1-f180.google.com with SMTP id 3f1490d57ef6-bd77424c886so858312276.0

for ; Thu, 13 Jul 2023 09:31:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689265873; x=1691857873;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=osD5HHv4TT61vgSicVmw9pEQfgwqWCm0OjHcIuH9A54=;

b=WYT1mNa7W0zgWG4YVioMX8P5Lk52+Yn1u888o1v73DErRCEPwviowtebNFBa1jjBJN

6SECmxFo0Yuz1V1c2XoLUP0iOQ4l8x+SYznkOr0vBQZDyimvyBcVSNcnNUkSo0ASyt/T

Ii/oKPw/wTpZ3KSPYD0t5oO/8DkCsdqtzOKu0PZ3UFd0z9PMrLbFjw6SqeUMper9Tk1d

G5OKntpNxQX14S0nhPsfGvAPpT+1S34D6OPoTL/pwdKmHvISy9IAwhcyweN3/j04+xtB

vDY714aDeyAab/+2Fsi+ff7LbaPQ3QiN4m1wPMo48bM2OfvVopdBdGR0mEnkZknME7TZ

+hTA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689265873; x=1691857873;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=osD5HHv4TT61vgSicVmw9pEQfgwqWCm0OjHcIuH9A54=;

b=LDN5nS6TEAEsC54DXc+TmWjJqBwnduAjR00wBTc/sYaN48DA8kQa3nV2WMwH0y4EN1

X8VEtPIWoYwHu0veG4rgnmHw79ZnH/RMq8Trq6TTe/8KrCT9NwEuw9qRYoHUXcYXFpcU

cgpcBIlSWVTNcJgORMoJmdYWKPxaxbZV0ZJwMYLLlsNiusv1KEs/bxWGgGwldjIpBYdB

+ix3NqcXSU9/XNl1IzJBb2iLq7/DMQb/6jK0jnZFmRVP7fNBI/VKmEzZgVzsYm/GYlQ0

ZcSY/6OHxFEsWSvc0nvk+TixaEyE/ErNhxW/o1QsfgBTuwvuKPgEVkNLJQH7U6SYmyoi

u43A==

X-Gm-Message-State: ABy/qLbgqhHGu8BkvBsQczts+mlowRPEmjxysrxcCbd6t/kwcBnoF7mP

vjRlO8Xun2mdAeVsY2zbeUqfBBQbIzexptj0oNRy9A==

X-Google-Smtp-Source: APBJJlELqpjC/mjLXfU1VQfGcBOym+43sm+7xjjX+M6mCbYmLIvqA/c+iHX004I9xiL1YH2h/A+HwA==

X-Received: by 2002:a5b:b51:0:b0:c60:8e77:6311 with SMTP id b17-20020a5b0b51000000b00c608e776311mr1739341ybr.30.1689265873504;

Thu, 13 Jul 2023 09:31:13 -0700 (PDT)

Received: from 194.233.98.55 ([194.233.98.55])

by smtp.gmail.com with ESMTPSA id b16-20020a5b0090000000b00c60a6b38427sm1398901ybp.26.2023.07.13.09.31.12

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 13 Jul 2023 09:31:13 -0700 (PDT)

Message-ID: <64b026d1.5b0a0220.2cd74.9a83@mx.google.com>

From: "Zack Johnson"

Subject: =?utf-8?B?T3JkZXIgQ29uZmlybWF0aW9uIERldGFpbHMjODQwODM3CQ==?=

To: "root"

Content-Type: multipart/alternative; boundary="kbtD6oG4=_auS2heATOAcb8DNLkBb364gs"

MIME-Version: 1.0

Organization: Subscription Renewal Dept.

Date: Thu, 13 Jul 2023 22:01:11 +0530



This is a multi-part message in MIME format



--kbtD6oG4=_auS2heATOAcb8DNLkBb364gs

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Receipt from : 13 July, 2023



Hello there, root@nl2k.ab.ca



We are delighted that you have renewed your PC Security yearly members=

hip with =C3=B9s.



The services will be restored within 04 to 24 hours, and the plan will=

be in =C3=A8ffect until July 12, 2024.



As authorized by you, we have debited your account with ($ 398.00) , t=

his amount will be visible on the statement shortly.



For assistance, reach out our support team at # +1 (833) 505-2616 (Tol=

l-free)



Order Renewal Details: -



Customer ID- 794-0361-73794

Product Name- Ge=C3=A9k-Squ=C3=A5d PC and Network Protection Shield

Renewal Date- July 13, 2023

Annual Charge- $ 398.00



Please be aware that because you have chosen auto debit, your subscrip=

tion will be =C3=A2utomatically renewed every year, and the same recur=

ring amount will be paid.



However, if you don't wish to continue with our services or you would =

like drop all the charges and get the full =C3=A0mount refunded back, =

please contact us immediately.



For Cancellation, Contact Support at # +1 (833) 505-2616





We obliged to you



Pamela Williams

Membership Plan Details#840149=09





--kbtD6oG4=_auS2heATOAcb8DNLkBb364gs

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Re=

ceipt from : 13 July, 2023




New Roman", Times, serif; font-size: 15px;'>Hello there, root@nl2k.ab.=

ca



We are delighted that you have rene=

wed your PC Security yearly membership with =C3=B9s.



The services will be restored withi=

n 04 to 24 hours, and the plan will be in =C3=A8ffect until July 12=

, 2024.




New Roman", Times, serif; font-size: 16px;'>As authorized by you, we h=

ave debited your account with ($ 398.00) , this amount will be visible=

on the statement shortly.




New Roman", Times, serif; font-size: 16px;'>
184, 49, 47);">For assistance, reach out our support team at # =

+1 (833) 505-2616 
gb(184, 49, 47);">(Toll-free)




New Roman", Times, serif; font-size: 16px;'>Order Renewal D=

etails: -



Customer ID- 794-0361-77365
Prod=

uct Name- Ge=C3=A9k-Squ=C3=A5d PC and Network Protection Shield
Ren=

ewal Date- July 13, 2023
Annual Charge- $ 398.00



Please be aware that because you ha=

ve chosen auto debit, your subscription will be =C3=A2utomatically ren=

ewed every year, and the same recurring amount will be paid.



However, if you don't wish to con=

tinue with our services or you would like drop all the charges and get=

the full =C3=A0mount refunded back, please contact us immediately.
iv>


47);">For Cancellation, Contact Support at # +1 (833=

) 505-2616




New Roman", Times, serif; font-size: 16px;'>

font-size: 15px;">
, serif;'>Sincerely,




pan style=3D'font-family: "Times New Roman", Times, serif;'>Nga Onl=

y
s, serif; font-size: 15px;'>

">Subscr=

iption Renewed Again#921045













--kbtD6oG4=_auS2heATOAcb8DNLkBb364gs--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA