Geek Squad phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Jul 2023 14:09:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qPTjr-000O7i-39

for dave@doctor.nl2k.ab.ca;

Fri, 28 Jul 2023 14:07:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Jul 2023 14:07:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f67.google.com ([209.85.216.67]:48143)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qPQKy-000AgZ-17

for root@nk.ca;

Fri, 28 Jul 2023 10:29:13 -0600

Received: by mail-pj1-f67.google.com with SMTP id 98e67ed59e1d1-267fc04ec74so1683210a91.0

for ; Fri, 28 Jul 2023 09:27:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1690561624; x=1691166424;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=y3S1NiKkrnp1J6EX0uQTSrodrNXMyNEpEYmWO40rElU=;

b=WSXb1pTleAnWHtsaxD8IEW8Z8qM5+3iMooBBqH/Y7Dg73n9EI+5CBIMwura3kSp9+W

+flF3lHQlk3JKIlQTnI3vfzXltZWBQS4BH1XLtIr4r0qlkimsg01Su2wlBfuK6Gd4YeE

B2ZPyk2DoRAOtJKFkjHFNNYn5NNgNJSgH6bAiVn3roN71LF2nmsT52wsx2Nw9ZKdcAVp

cQmFHXVVxTO4AJV3hpGpfgWvo00xI6g+CMBvRFNCEYzJa6ZPjb3/mWv81gjEhLkJNNj6

LoYVU7Voh1K9QxHcL+xD9QQ2keH0u627DeuPlBsF/zzHwfz+0F3uRhbMFDUhFTOemcqr

2wig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1690561624; x=1691166424;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=y3S1NiKkrnp1J6EX0uQTSrodrNXMyNEpEYmWO40rElU=;

b=Kdny7lIagXgfxgsXZBQvQTgXbrrSLxDnttm4By7HlIt7VLSYNjhqANQMpbU2zgcMRD

8dnB8FuH1apykcsZci8951ASDn6jjGLpm7miSchU+QM1/Wko01Tjx9nFBrMcHoc3MAUX

SPBXzaZjKCGAa0fpb6gE3fKqfwEXrd4XX9O2YD0XUAUqBR6cHRcWPnNtSxTrhn2eAaRs

2MwzAMt5ku5JN+s8Z4OO/HppStDJvfSTCnxXXjLLY9so6g3+2OCL550i2xFZBC26vUVB

tBm/0H0D7jdtFkzNbZtzhT1/IN7sUIsU+V7ZiF77aGZo7u5iJveh+wwNtXJ3tQ/N0wpj

nybA==

X-Gm-Message-State: ABy/qLauVB5QxMmMyxD3lqTcnMJ3rAbhagP3ZnxXSIx+BbD8pNQ7YCSu

h1UszU4CfURepPzsdPp4B1Ocnc478qbEE9dLM0E=

X-Google-Smtp-Source: APBJJlFSrGoQpKTyY37U+iL1UmeP/fjkkl1Tac6TJ4YVI54cV1BHBUEVQ/eW/Pt+xPruTNBgrfaRxQ==

X-Received: by 2002:a17:90a:3e4e:b0:262:ee7d:2d20 with SMTP id t14-20020a17090a3e4e00b00262ee7d2d20mr2305981pjm.12.1690561623934;

Fri, 28 Jul 2023 09:27:03 -0700 (PDT)

Received: from 157.97.134.140 ([94.140.8.3])

by smtp.gmail.com with ESMTPSA id z8-20020a17090a398800b00267f1455d60sm2825282pjb.20.2023.07.28.09.27.02

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 28 Jul 2023 09:27:03 -0700 (PDT)

Message-ID: <64c3ec57.170a0220.48575.55ff@mx.google.com>

From: "Marvin Ashley"

Subject: Plan Upgraded Again#690412

To: "root"

Content-Type: multipart/alternative; boundary="Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel"

MIME-Version: 1.0

Date: Fri, 28 Jul 2023 09:27:02 -0700

X-Antivirus: AVG (VPS 230728-12, 7/28/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello User , root@nk.ca



Order Successful!



Thank you again for renewing the annual subscription.



We are pleased that you have chosen GEEK Squad =C3=A1s your preferred =

PC security supplier.



This is to tell you that your yearly subscription was successfully ren=

ewed and restarted on (July 28, 2023).



The annual fee of ($329.00) has been auto-debited from the updated pay=

ment mode; the charge will reflect on the stat=C3=A9ment shortly.



Order Information:



Invoice number: 974-3881-62715

Service: GEEK Total Protection

Payment method: Auto-debit

Renewal date: July 28, 2023

Next renewal: July 27, 2024

Subscription fee: $329.00



In any case, if you don't recognize this charge or you believe this is=

an unauthorized transaction and want a full refund, please contact us=

immediately.



For a refund or cancellation, kindly reach out to us within 24 hours t=

o avoid =C3=A1ny transactional disputes.



Customer Helpline Toll-Free Number: +1 888 984 8059







With appreciation,



Marvin Ashley

Service Activation Dept.

Toll-free Number: +1 888 984 8059.





--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline
















fl8">

Hey Existin=

g Customer,  root@nk.ca




le=3D"color: rgb(37, 37, 37);">
">Order Successful!



Thank you a=

gain for renewing the annual subscription.



We are pleased that you have chosen=

GEEK Squad =C3=A1s your preferred PC security supplier.



This is to tell you that your yearl=

y subscription was successfully renewed and restarted on (July 28, 202=

3).



The annual =

fee of ($329.00) has been auto-debited from the updated payment mode; =

the charge will reflect on the stat=C3=A9ment shortly.




le=3D"color: rgb(37, 37, 37);">
">Order Information:



Invoice num=

ber: 974-3881-62715
Service: GEEK=

Total Protection
Payment method:=

Auto-debit
Renewal date: July 28=

, 2023
Next renewal: July 27, 202=

4
Subscription fee: $329.00



In any case=

, if you don't recognize this charge or you believe this is an unautho=

rized transaction and want a full refund, please contact us immediatel=

y.



For a refun=

d or cancellation, kindly reach out to us within 24 hours to avoid =C3=

=A1ny transactional disputes.



Customer He=

lpline Toll-Free Number: 
>+1 888 984 8059




Yours respe=

ctfully,



Marvin Ashl=

ey
Service Activation Dept.

yle=3D"color: rgb(37, 37, 37);">Toll-free Number:
t-align: left; color: rgb(40, 50, 78); text-transform: none; text-inde=

nt: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-=

size: medium; font-style: normal; font-weight: 700; word-spacing: 0px;=

white-space: normal; orphans: 2; widows: 2; background-color: rgb(255=

, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial;'>
style=3D"color: rgb(71, 85, 119);">+1 888 984 8059

rong style=3D"color: rgb(37, 37, 37);">.













--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA