Geek Squad phish from Google / Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 21 Jul 2023 13:26:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qMvi4-000PTB-2E
for dave@doctor.nl2k.ab.ca;
Fri, 21 Jul 2023 13:22:40 -0600
Resent-From: The Doctor
Resent-Date: Fri, 21 Jul 2023 13:22:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f46.google.com ([209.85.166.46]:51606)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qMr2w-000N3E-0F
for sales@nk.ca;
Fri, 21 Jul 2023 08:24:00 -0600
Received: by mail-io1-f46.google.com with SMTP id ca18e2360f4ac-78358268d1bso83505139f.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689949309; x=1690554109;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=gwH5KqaVlWKFjqDziOhGiWLUdu5ypmH6lS/HAGHqjvk=;
b=HxMdGrtFbgR3zIVtgjPAvWljCvO3fA2rXUYvF5+izbvvKRlHdbD0Wzwvr0dROnjZij
G7fJ0iu6CLLS8f9gtWSqUatUWYNiLQJvR1u91+uJJtp5T+UeQ+JTAkj1QkPiZuhlbRW7
n2V441hJOjsiwoZwph7MCjw8UXShp6TNmuK/1Mc1F9Fl4bVtyL/EiPtgnZ7ow3/m/QcZ
KH0KoaGIn5XzqYYIO00sGdsu2lIsWJNPnHq6ES/0zRpPlkXVBmlaUNMGjOSG7cuDkfg2
O2pFknRHnXgFw39ayXs1GFV5bcEmZHvrky3DKOrdRQcw8R88y6YPmHjJ0vZ/VBcaDpqG
3Iwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689949309; x=1690554109;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=gwH5KqaVlWKFjqDziOhGiWLUdu5ypmH6lS/HAGHqjvk=;
b=KYQ+n2NhHL1zJdKGm7rX/w4ZN2pDRfH9XDTfyXbZgwOE3JxwZzXQ+l1Bm1QzDJzAkw
/ky6qeupxHfh5u794TCdRaDMtpgj0mEWLrhMVzEmMxIBVr4yK+tJ2BLu9dzttcSbke+5
nFARo2yTSULV7OUyUMppehQsboYhF4CWJt8l+EU00uwNd/e70sx3A8rL099GGCMfSYpn
cFtMS6Q0vI07C8XE/v1rOM48OEkN22cnflF7tLHp3kg1nNS2+NEHRd6u8NMe0oJ/wzim
3/CQMhvJNcNEO/dW80FXThQ8BDMMCZOK+N8qGD5R4J+h/WMafTeGCsln9T6WUGDq1IRE
GXNg==
X-Gm-Message-State: ABy/qLYZInUzQn3AJBfuW0lMjsVtfr0md3g90DkMTWCT5BIyb5nD47D5
VZIj3RX8wjKdOPje2KKV8P6O5aj8oyokT6mHFXnD8g==
X-Google-Smtp-Source: APBJJlEJb+/m2+hApWvRErX9XEi9EyjuA9kV9H1eLBriP5LwPsR1+3YOR81ucl64uUNsZTZPLwWAUQ==
X-Received: by 2002:a6b:a17:0:b0:787:1cfc:5423 with SMTP id z23-20020a6b0a17000000b007871cfc5423mr107335ioi.16.1689949309225;
Fri, 21 Jul 2023 07:21:49 -0700 (PDT)
Received: from 64.44.84.36 ([64.44.84.36])
by smtp.gmail.com with ESMTPSA id w2-20020a02cf82000000b0042b48e5da4bsm990685jar.134.2023.07.21.07.21.46
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Fri, 21 Jul 2023 07:21:47 -0700 (PDT)
Message-ID: <64ba947b.020a0220.b1ca2.1af6@mx.google.com>
From: "Logan Horan"
Subject: Customer Helpline & Service Team
To: "sales"
Content-Type: multipart/alternative; boundary="F9JBlMRYWusqI4=_WDTGxVAffrhGAFsHM6"
MIME-Version: 1.0
Date: Fri, 21 Jul 2023 07:21:46 -0700
X-Antivirus: AVG (VPS 230721-4, 7/20/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--F9JBlMRYWusqI4=_WDTGxVAffrhGAFsHM6
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear user sales@nk.ca
Thank you again for your order!
I'm writing to let you know that your membership to PC Care and Networ=
k Shield from last year has expired.
As you have opted for automatic renewal, we are renewing your annual s=
ubscription, which will be resumed within 4 to 24 hours.
The service charge of $ 379.99 has been successfully debited from the =
nominated payment mode; the charge will appear on the statement shortl=
y.
The specifics of your order are as follows:
Customer Unique ID: 95737-87988
Seller's name: GEEK Squad Inc.
Payment Mode: Automatic Debit
Renewal Date: July 21, 2023
Expiry Date: July 20, 2024
Total Amount: $ 379.99
Please be informed that the same recurring fee will be debited again n=
ext year on July 20, 2024, unless you stop auto-debit payments or canc=
el the subscription.
For a refund or cancellation, kindly reach out to us immediately to av=
oid any transactional disputes. Toll-free: +1 (855) 428 - 0884.
=20
With Gratitude,
Katie Smith
Customer Helpline Team (Manager)
Toll-free Number: +1 (855) 428 - 0884.
--F9JBlMRYWusqI4=_WDTGxVAffrhGAFsHM6
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
, 37, 37);">Hello Customer sales@nk.ca
Thank you aga=
in for your order!
I'm writing t=
o let you know that your membership to PC Care and Network Shield from=
last year has expired.
As you have o=
pted for automatic renewal, we are renewing your annual subscription, =
which will be resumed within 4 to 24 hours.
The service c=
harge of $ 379.99 has been successfully debited from the nominated pay=
ment mode; the charge will appear on the statement shortly.
e=3D"color: rgb(184, 49, 47);">The specifics of your order are as foll=
ows:
Customer Uniq=
ue ID: 95737-78779
Seller's name:=
GEEK Squad Inc.
Payment Mode: Au=
tomatic Debit
Renewal Date: July =
21, 2023
Expiry Date: July 20, 20=
24
Total Amount: $ 379.99
Please be inf=
ormed that the same recurring fee will be debited again next year on J=
uly 20, 2024, unless you stop auto-debit payments or cancel the subscr=
iption.
For a refund =
or cancellation, kindly reach out to us immediately to avoid any trans=
actional disputes. Toll-free:
9, 47);">+1 (855) 428 - 0884.
Faithfully Yo=
urs,
Katie Smith
r style=3D"color: rgb(37, 37, 37);">Customer Helpline Team (Manager)
r style=3D"color: rgb(37, 37, 37);">Toll-free Number:
'text-align: center; color: rgb(37, 37, 37); text-transform: none; tex=
t-indent: 0px; letter-spacing: normal; font-family: "Times New Roman";=
font-size: medium; font-style: normal; font-weight: 700; word-spacing=
: 0px; white-space: normal; orphans: 2; widows: 2; background-color: r=
gb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: =
normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: ini=
tial; text-decoration-style: initial; text-decoration-color: initial;'=
>+1 (855) 428 - 0884.<=
/strong>
--F9JBlMRYWusqI4=_WDTGxVAffrhGAFsHM6--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments