PC Care Network phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Aug 2023 15:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQwlt-000IXY-19

for dave@doctor.nl2k.ab.ca;

Tue, 01 Aug 2023 15:19:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Aug 2023 15:19:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f172.google.com ([209.85.222.172]:52444)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQuMX-000Lks-1l

for doctor@nk.ca;

Tue, 01 Aug 2023 12:44:56 -0600

Received: by mail-qk1-f172.google.com with SMTP id af79cd13be357-76ca7b4782cso194471785a.0

for ; Tue, 01 Aug 2023 11:42:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1690915368; x=1691520168;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=bqCfg+e1iOXnPCACouCHPgDAM27tMAb2qIxjMKJWgDo=;

b=sZtJKnhyMQY9Q4vqzNbIM0QdS7E73rFE0VnBzvNKFQODpPFY36XmZa7LW8mIfQIkn3

kndlsuMXYIQ4m2BoOVn+KON2ZH7YhZHMCMJ4pBnTrdEf0H+mN+tVU25IRedMBMRxS8EZ

g2io44zEydJ04OC2bKdnycihmUSH4CiqJ9u3ECE6cAT1n7cB5PLFoxGO6NYomnxI3Jw3

IduzVlV6QRzUbFTAYqEoCghOZRCWsW93xNR7RM2Z8yFcWMLiwjsUistV8lwt3vIMCrtU

m2IY/RYhKxVFE/AH2dsyM3zCbBKa5DS7L26L5ByD15QgEq7TiKoq7s1hny4nYwPmgeId

YArQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1690915368; x=1691520168;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=bqCfg+e1iOXnPCACouCHPgDAM27tMAb2qIxjMKJWgDo=;

b=GovjhTNXU+3iKSF9aQYsLRBtnoXp6WNJLGPYq4psaUttRnO2yxdRhaz3mX5WNtKiL7

Yqxf13rctCJPyzk5aHmpIc4XcOuAxV90GPoTmT/rGFFTXjQQVNGYIVI2uidOET1Uo68R

c1KMPdc2AvHadwSUx6pUnZsfSymf2LdU94Yz8/qd0gsWawVtJDK7qyvK7cvVIBepwI+5

YVsQq6EbEOTsmgutGbHaIg/11fo7uGrV6l5atY41QN9PV4rNRV4NNAv1l5M7pOK5iW30

+rjovemnL4BRIiMn8hmTA8M1OsToYseo2IRHA8cZGRJyyqpBPxSHjbnL4OAoCjpdFyf/

wZfA==

X-Gm-Message-State: ABy/qLajrYi4MHrGehFz8WRU53oi8HxMemiGAlf55qMsloHUVVHMeLo4

dTX9k1BpWZ+TzJNXip0peK8FbFdH1z8KzH/A

X-Google-Smtp-Source: APBJJlGdtcBz92O3WPBo2PiZu/k6hVCcgPGZpCFexIa08YtG6tiQit8epzsgeSpXakn3iV4x9naAgw==

X-Received: by 2002:a05:620a:47aa:b0:76c:98b2:b098 with SMTP id dt42-20020a05620a47aa00b0076c98b2b098mr10804856qkb.48.1690915368349;

Tue, 01 Aug 2023 11:42:48 -0700 (PDT)

Received: from 45.85.144.186 ([45.85.144.186])

by smtp.gmail.com with ESMTPSA id a16-20020a05620a125000b00767502e8601sm4337367qkl.35.2023.08.01.11.42.46

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 01 Aug 2023 11:42:47 -0700 (PDT)

Message-ID: <64c95227.050a0220.bf5db.0fc0@mx.google.com>

From: "Jamie Armstrong"

Subject: Network Services Alert#162139

To: "doctor"

Content-Type: multipart/alternative; boundary="i5BtXePhdFBcfZYLy7Bcn8e3EqXF84=_9L"

MIME-Version: 1.0

Organization: Senior Head of Billing Team

Date: Tue, 1 Aug 2023 11:42:45 -0700



This is a multi-part message in MIME format



--i5BtXePhdFBcfZYLy7Bcn8e3EqXF84=_9L

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear Subscriber,=20



Receiver's email: doctor@nk.ca

Invoice ID: 957-5666-3607



Welcome back! We thank you for choosing us again.



This email refers to your previous year's yearly subscription, which e=

xpires today.



As per our agreement, you opted for auto renewal, so we have once agai=

n restored and renewed your PC and Network Security services.



We have debited an annual fee of $ 379.99 (including taxes) from the n=

ominated payment source; the amount will be shown on the statement in =

a few hours.



Have Questions? Please contact us at +1 (833) 505-2603.



Here is your order information:



PC Care and Network Protection Shield

Seller's name: MCAfee Total Corp.

Payment mode: Direct Debit

Renewal date: Aug 01, 2023

Next renewal: July 31, 2024

Subscription fee: $ 379.99



If you suspect there is an error in this transaction or you desire to =

cancel the subscription and receive a full refund, please contact us i=

mmediately to avoid payment disputes.



=20



Thanks & Regards,



Jamie Armstrong=20

Senior Head of Billing Team

Toll-free: +1 (833) 505-2603.





--i5BtXePhdFBcfZYLy7Bcn8e3EqXF84=_9L

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline







=20







Dear Subs=

criber, 



Receiver'=

s email: doctor@nk.ca
Invoice ID:=

043-5610-6913



Welcome b=

ack! We thank you for choosing us again.



This emai=

l refers to your previous year's yearly subscription, which expires to=

day.



As per ou=

r agreement, you opted for auto renewal, so we have once again restore=

d and renewed your PC and Network Security services.



We have d=

ebited an annual fee of $ 379.99 (including taxes) from the nominated =

payment source; the amount will be shown on the statement in a few hou=

rs.



Have Ques=

tions? Please contact us at
;">+1 (833) 505-2603

, 37);">.




tyle=3D"color: rgb(37, 37, 37);">Here is your order information:
ng>



PC Care&n=

bsp;and Network Protection Shield

>Seller's name: MCAfee Total Corp.

">Payment mode: Direct Debit
Rene=

wal date: Aug 01, 2023
Next renew=

al: July 31, 2024
Subscription fe=

e: $ 379.99



If you su=

spect there is an error in this transaction or you desire to cancel th=

e subscription and receive a full refund, please contact us immediatel=

y to avoid payment disputes.



 
>

Thanks & =

Regards,



Jamie Arm=

strong 
Senior Head of Billi=

ng Team
Toll-free:
style=3D"color: rgb(0, 0, 0);">+1 (833) 505-2603

g style=3D"color: rgb(37, 37, 37);">.













--i5BtXePhdFBcfZYLy7Bcn8e3EqXF84=_9L--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA