Geek Squad phish from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Jul 2023 08:25:22 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qM84U-000MzD-2v

for dave@doctor.nl2k.ab.ca;

Wed, 19 Jul 2023 08:22:30 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Jul 2023 08:22:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f48.google.com ([209.85.166.48]:51542)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qM7ln-0009uy-0E

for webmaster@nl2k.ab.ca;

Wed, 19 Jul 2023 08:03:19 -0600

Received: by mail-io1-f48.google.com with SMTP id ca18e2360f4ac-78358268d1bso360780239f.3

for ; Wed, 19 Jul 2023 07:01:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689775280; x=1692367280;

h=date:organization:mime-version:to:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=zg1J8zA4+kii0SfdOjwvnJsbbY04xcYj8AhhhpTXBz8=;

b=eRxpXhI4nBHU3rNzLUztDyVG7yo/ZSCTVEf5WIEH+37asG+IvJXZRG49E//INfjdzG

bmXOAmGfpam6WzYfwUnkn0Rsmn5i5feGhyT6pVUBkm+Lq1jF2koPuH2LTQDOSByXtaGJ

yidxZ1D/nlxE46K32S8tQ9w7G2IEcXFuWPlYb9tTBM8zTboly26KE48aF8DUR8FOisYh

UZLpH5EtKMIgR0+TiYcI3pZuboprqj9KXWJFF4IYOtdhnTim2QLWo9P5GC3lfIJSob2N

cWLN4ntNCQR+p+eCAM0rN0as5CCrBeypoewXMhTJNzqQoltnAeQJGT9jY9w4lg+1TAyI

aS4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689775280; x=1692367280;

h=date:organization:mime-version:to:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=zg1J8zA4+kii0SfdOjwvnJsbbY04xcYj8AhhhpTXBz8=;

b=MXGtRoX7mKxusQvYlBlUA1SytvfUtHF5CcY2WzeEPLdfVblRoFQtn+wzHWnMmPU1oH

w/kY81Fr/uVa/CZrvzHBoqf71edZ7Nl4mYTbGN22a6WICe2i8tgXh9BR/D8PisxKcK6A

Apy1SsgHIIXSGBgQETQz5yf/pbp0QSxVqvSjoZHN/ljRmKy0xXm9WKS1k7SI3If6sRgs

OkoWy26GNz/w1u3hGmjggz43yFnaRpoPJyHO8r2JlwLAdLXi7Jx+0k0YLBrOJVBYEt4w

veiynoi08OGsu4edPKMJK7yKGoVYNg6eU0nqxmrVllcVh/g8lKf+Ue4vqv7RarNvmLUL

3WHw==

X-Gm-Message-State: ABy/qLbCrOu97qbcEw3eLGdpxGb7kqDnqwAMfcegmJ+vuVNUJQy7Jfax

OJAoR0x2aCRHJNs9ha0Q946IX08sBoWzHrsJ+0U=

X-Google-Smtp-Source: APBJJlEN8dBvvRHCZJuYZ70u0wkKbfMRBdaB3hhKgOfEonjcYf26cNL4ztiAHzYEjSUfD2b74fOUbw==

X-Received: by 2002:a6b:d815:0:b0:787:1555:efca with SMTP id y21-20020a6bd815000000b007871555efcamr2738905iob.5.1689775280406;

Wed, 19 Jul 2023 07:01:20 -0700 (PDT)

Received: from 83.136.182.180 ([83.136.182.184])

by smtp.gmail.com with ESMTPSA id l20-20020a6b7014000000b0077a1b6f73b9sm1388710ioc.41.2023.07.19.07.01.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 19 Jul 2023 07:01:20 -0700 (PDT)

Message-ID: <64b7ecb0.6b0a0220.b2746.24bf@mx.google.com>

From: Hazel R Shaw

X-Google-Original-From: "Hazel R Shaw"

To: "webmaster"

Content-Type: multipart/alternative; boundary="FsseDnl8IONsA=_IcU9RCCj1rbUChx4lc5"

MIME-Version: 1.0

Organization: Geek Helpline Dept.

Date: Wed, 19 Jul 2023 19:31:19 +0530



This is a multi-part message in MIME format



--FsseDnl8IONsA=_IcU9RCCj1rbUChx4lc5

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi there, webmaster@nl2k.ab.ca



Annual Subscription Resumed!



We thank you for choosing GEEK Squad again and using our services sinc=

e July 18, 2021.



As per our contract, you opted for automatic renewal, so we have once =

again renewed and reactivated your PC services.



The subscription fee of $ 379.99 has been successfully taken out of yo=

ur updated account funds, which will reflect on the statement shortly.=





Here are your annual subscription details:



Customer Reference ID: 6061008563

PC Security and Network Shield

Payment mode: Direct debit

Annual charge: $ 379.99



The current subscription started on July 19, 2023, and it will remain =

active until July 18, 2024, unless you choose to unsubscribe or drop t=

he charges.



In any case, if you wish to opt out or stop auto-debit payments and wa=

nt the full amount refunded back, please contact us now to avoid trans=

actional disputes.



For refunds and cancellations, please reach out to us at +1 (888) 773-=

1319.



=20



Respactfully



Roxanne Taurasi

Geek Helpline Dept.

Toll-free: +1 (888) 773-1319.





--FsseDnl8IONsA=_IcU9RCCj1rbUChx4lc5

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Hi there,=

 webmaster@nl2k.ab.ca




tyle=3D"color: rgb(37, 37, 37);">Annual Subscription Resumed!
=



We thank =

you for choosing GEEK Squad again and using our services since July 18=

, 2021.



As per ou=

r contract, you opted for automatic renewal, so we have once again ren=

ewed and reactivated your PC services.



The subsc=

ription fee of $ 379.99 has been successfully taken out of your update=

d account funds, which will reflect on the statement shortly.




tyle=3D"color: rgb(37, 37, 37);">Here are your annual subscription det=

ails:



Customer =

Reference ID: 7142535001
PC Secur=

ity and Network Shield
Payment mo=

de: Direct debit
Annual charge: $=

379.99



The curre=

nt subscription started on July 19, 2023, and it will remain active un=

til July 18, 2024, unless you choose to unsubscribe or drop the charge=

s.



In any ca=

se, if you wish to opt out or stop auto-debit payments and want the fu=

ll amount refunded back, please contact us now to avoid transactional =

disputes.



For refun=

ds and cancellations, please reach out to us at
: rgb(37, 37, 37);">+1 (888)=

773-1319.



 
>

Many than=

ksfull



Brandi Mo=

rgan
Geek Helpline Dept.

=3D"color: rgb(37, 37, 37);">Toll-free:
, 37, 37);">+1 (888) 773-131=

9.













--FsseDnl8IONsA=_IcU9RCCj1rbUChx4lc5--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA