Geek Squad phish from Google / Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 28 Jul 2023 14:09:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qPTjr-000O7i-39
for dave@doctor.nl2k.ab.ca;
Fri, 28 Jul 2023 14:07:04 -0600
Resent-From: The Doctor
Resent-Date: Fri, 28 Jul 2023 14:07:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f67.google.com ([209.85.216.67]:48143)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qPQKy-000AgZ-17
for root@nk.ca;
Fri, 28 Jul 2023 10:29:13 -0600
Received: by mail-pj1-f67.google.com with SMTP id 98e67ed59e1d1-267fc04ec74so1683210a91.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1690561624; x=1691166424;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=y3S1NiKkrnp1J6EX0uQTSrodrNXMyNEpEYmWO40rElU=;
b=WSXb1pTleAnWHtsaxD8IEW8Z8qM5+3iMooBBqH/Y7Dg73n9EI+5CBIMwura3kSp9+W
+flF3lHQlk3JKIlQTnI3vfzXltZWBQS4BH1XLtIr4r0qlkimsg01Su2wlBfuK6Gd4YeE
B2ZPyk2DoRAOtJKFkjHFNNYn5NNgNJSgH6bAiVn3roN71LF2nmsT52wsx2Nw9ZKdcAVp
cQmFHXVVxTO4AJV3hpGpfgWvo00xI6g+CMBvRFNCEYzJa6ZPjb3/mWv81gjEhLkJNNj6
LoYVU7Voh1K9QxHcL+xD9QQ2keH0u627DeuPlBsF/zzHwfz+0F3uRhbMFDUhFTOemcqr
2wig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1690561624; x=1691166424;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=y3S1NiKkrnp1J6EX0uQTSrodrNXMyNEpEYmWO40rElU=;
b=Kdny7lIagXgfxgsXZBQvQTgXbrrSLxDnttm4By7HlIt7VLSYNjhqANQMpbU2zgcMRD
8dnB8FuH1apykcsZci8951ASDn6jjGLpm7miSchU+QM1/Wko01Tjx9nFBrMcHoc3MAUX
SPBXzaZjKCGAa0fpb6gE3fKqfwEXrd4XX9O2YD0XUAUqBR6cHRcWPnNtSxTrhn2eAaRs
2MwzAMt5ku5JN+s8Z4OO/HppStDJvfSTCnxXXjLLY9so6g3+2OCL550i2xFZBC26vUVB
tBm/0H0D7jdtFkzNbZtzhT1/IN7sUIsU+V7ZiF77aGZo7u5iJveh+wwNtXJ3tQ/N0wpj
nybA==
X-Gm-Message-State: ABy/qLauVB5QxMmMyxD3lqTcnMJ3rAbhagP3ZnxXSIx+BbD8pNQ7YCSu
h1UszU4CfURepPzsdPp4B1Ocnc478qbEE9dLM0E=
X-Google-Smtp-Source: APBJJlFSrGoQpKTyY37U+iL1UmeP/fjkkl1Tac6TJ4YVI54cV1BHBUEVQ/eW/Pt+xPruTNBgrfaRxQ==
X-Received: by 2002:a17:90a:3e4e:b0:262:ee7d:2d20 with SMTP id t14-20020a17090a3e4e00b00262ee7d2d20mr2305981pjm.12.1690561623934;
Fri, 28 Jul 2023 09:27:03 -0700 (PDT)
Received: from 157.97.134.140 ([94.140.8.3])
by smtp.gmail.com with ESMTPSA id z8-20020a17090a398800b00267f1455d60sm2825282pjb.20.2023.07.28.09.27.02
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Fri, 28 Jul 2023 09:27:03 -0700 (PDT)
Message-ID: <64c3ec57.170a0220.48575.55ff@mx.google.com>
From: "Marvin Ashley"
Subject: Plan Upgraded Again#690412
To: "root"
Content-Type: multipart/alternative; boundary="Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel"
MIME-Version: 1.0
Date: Fri, 28 Jul 2023 09:27:02 -0700
X-Antivirus: AVG (VPS 230728-12, 7/28/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hello User , root@nk.ca
Order Successful!
Thank you again for renewing the annual subscription.
We are pleased that you have chosen GEEK Squad =C3=A1s your preferred =
PC security supplier.
This is to tell you that your yearly subscription was successfully ren=
ewed and restarted on (July 28, 2023).
The annual fee of ($329.00) has been auto-debited from the updated pay=
ment mode; the charge will reflect on the stat=C3=A9ment shortly.
Order Information:
Invoice number: 974-3881-62715
Service: GEEK Total Protection
Payment method: Auto-debit
Renewal date: July 28, 2023
Next renewal: July 27, 2024
Subscription fee: $329.00
In any case, if you don't recognize this charge or you believe this is=
an unauthorized transaction and want a full refund, please contact us=
immediately.
For a refund or cancellation, kindly reach out to us within 24 hours t=
o avoid =C3=A1ny transactional disputes.
Customer Helpline Toll-Free Number: +1 888 984 8059
With appreciation,
Marvin Ashley
Service Activation Dept.
Toll-free Number: +1 888 984 8059.
--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
fl8">
Hey Existin=
g Customer, root@nk.ca
le=3D"color: rgb(37, 37, 37);">
">Order Successful!
Thank you a=
gain for renewing the annual subscription.
We are pleased that you have chosen=
GEEK Squad =C3=A1s your preferred PC security supplier.
This is to tell you that your yearl=
y subscription was successfully renewed and restarted on (July 28, 202=
3).
The annual =
fee of ($329.00) has been auto-debited from the updated payment mode; =
the charge will reflect on the stat=C3=A9ment shortly.
le=3D"color: rgb(37, 37, 37);">
">Order Information:
Invoice num=
ber: 974-3881-62715
Service: GEEK=
Total Protection
Payment method:=
Auto-debit
Renewal date: July 28=
, 2023
Next renewal: July 27, 202=
4
Subscription fee: $329.00
In any case=
, if you don't recognize this charge or you believe this is an unautho=
rized transaction and want a full refund, please contact us immediatel=
y.
For a refun=
d or cancellation, kindly reach out to us within 24 hours to avoid =C3=
=A1ny transactional disputes.
Customer He=
lpline Toll-Free Number:
>+1 888 984 8059
Yours respe=
ctfully,
Marvin Ashl=
ey
Service Activation Dept.
yle=3D"color: rgb(37, 37, 37);">Toll-free Number:
t-align: left; color: rgb(40, 50, 78); text-transform: none; text-inde=
nt: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-=
size: medium; font-style: normal; font-weight: 700; word-spacing: 0px;=
white-space: normal; orphans: 2; widows: 2; background-color: rgb(255=
, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal=
; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =
text-decoration-style: initial; text-decoration-color: initial;'>
style=3D"color: rgb(71, 85, 119);">+1 888 984 8059
rong style=3D"color: rgb(37, 37, 37);">.
--Qd5csbMmcZKCYOY5=_PtlT0XAypTIBXbel--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments