Geek Squad phish from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Aug 2023 15:21:17 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQwmk-000IiL-0W

for dave@doctor.nl2k.ab.ca;

Tue, 01 Aug 2023 15:20:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Aug 2023 15:20:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f41.google.com ([209.85.128.41]:50490)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQw3j-000Obk-21

for doctor@nk.ca;

Tue, 01 Aug 2023 14:33:39 -0600

Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-3fbc77e76abso56271995e9.1

for ; Tue, 01 Aug 2023 13:31:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1690921889; x=1691526689;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=C1kQySPFKtARz17znUJKhhDaMVtBYSpBRvX9kNfJPWY=;

b=CALQitNpNmHFzipqk0ojAc1blc4r1C5mVHog0MMHgvscwbubjAenlUJp97Hdw1Uh2T

a3Mq1nuoe8Oa40XyWnK7se6h77ruirH/ZtgPprGa3Jqv0rcz/PDcFDaET0U6cyn4MWER

YPPWWokxFdkGruX0oHuUngkGbrIfNMu41uAUYyMiI/tpyzAuRC9QcU/bGnO6ieYxHwFC

PsioHf47TOZYqs02l+IkklDrV+7E+HLqxL2GWzzB5STYIafRBjEgZ1qbRICb3z9VKEDI

Ykm6QMFSHYzUYXO7/jK/gMz745sg4ktYqY5wTCadnBmrFeo0Af6JSGNy+MIbZpKhMm8o

+E4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1690921889; x=1691526689;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=C1kQySPFKtARz17znUJKhhDaMVtBYSpBRvX9kNfJPWY=;

b=dXS1yUSMbp6lu/H6FEI9GK40TiDJDqTxoWg29ZNqRqqhJUjRIM6EFUSozFp36T79aD

sme2OvK3HPehc19wPV0RE7dE4vE3we+gq1uFLLMkMxmfp6aWUNTGo/yu2o1Y4Mn83g7v

Vh/GKgQIwRtEgrTRc5u/Xcy+PDxNnaJdjhlYz4dl1p4F6mOO7Sju6XFkBB7cUhXRN8Nh

l39IG/iVbz0/dAodFbK+e5XEHkvLNujbmS0qVxPBejo0Qf5qYX5BciWZiIgXYj3titQV

gJ1/OTjYDTbP+RDJsrxY4o65vx+HYQUel4an6Whznkp6tXOmu/PslFrwYD0Jp3Q8skNG

WVWw==

X-Gm-Message-State: ABy/qLYtM+O1FrcI71JhZgYVjMQdM9CRsj5e+4SUKnVuUXq49H+SF8os

OVvSX5aEGTczdzEsuyFJsoagT/OYddjahSPa

X-Google-Smtp-Source: APBJJlHGXq9gPss4I69SeHa9lUv7aIKahCFxqtdTiPOBis8jbn8B4sog07EyFpa1doadeY0Ixf0odQ==

X-Received: by 2002:adf:e3c9:0:b0:314:415:cbf5 with SMTP id k9-20020adfe3c9000000b003140415cbf5mr3104194wrm.51.1690921888846;

Tue, 01 Aug 2023 13:31:28 -0700 (PDT)

Received: from 91.196.221.112 ([91.196.221.112])

by smtp.gmail.com with ESMTPSA id f6-20020adff586000000b0030fa3567541sm8542078wro.48.2023.08.01.13.31.27

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 01 Aug 2023 13:31:27 -0700 (PDT)

Message-ID: <64c96b9f.df0a0220.63145.6c52@mx.google.com>

From: "Benton Wallace"

Subject: Transaction Alert Notice#593062

To: "doctor"

Content-Type: multipart/alternative; boundary="gbWkzYUkHF2=_hrvZQQC1xrS39mR2JnGU1"

MIME-Version: 1.0

Date: Tue, 1 Aug 2023 13:31:27 -0700



This is a multi-part message in MIME format



--gbWkzYUkHF2=_hrvZQQC1xrS39mR2JnGU1

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear,=20



Receiver's email: doctor@nk.ca

Invoice ID: 893-5672-1064



Welcome back! We thank you for choosing us again.



This email is in reference to your last-year annual subscription, whic=

h expired today.



As per our agreement, you opted for auto renewal, so we have once agai=

n restored and renewed your PC and Network Security services.



We have debited an annual fee of $ 389.99 (including taxes) from the n=

ominated payment source; the amount will be shown on the statement in =

a few hours.



Have Questions? Please contact us at+1 833 505 2603.



Here is your order information:



PC Care and Network Protection Shield

Seller's name: GEEK Squad Inc.

Payment mode: Direct Debit

Renewal date: Aug 01, 2023

Next renewal: July 31, 2024

Subscription fee: $ 389.99



If you believe there is an error in this transaction or you wish to ca=

ncel the subscription and want a full refund, please contact us immedi=

ately to avoid payment disputes.



=20



Kind regards,



Benton Wallace

Consumer Care Helpdesk

Toll-free:+1 833 505 2603.





--gbWkzYUkHF2=_hrvZQQC1xrS39mR2JnGU1

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Dear Cust=

omer, 



Receiver'=

s email: doctor@nk.ca
Invoice ID:=

893-5672-1064



Welcome b=

ack! We thank you for choosing us again.



This emai=

l is in reference to your last-year annual subscription, which expired=

today.



As per ou=

r agreement, you opted for auto renewal, so we have once again restore=

d and renewed your PC and Network Security services.



We have d=

ebited an annual fee of $ 389.99 (including taxes) from the nominated =

payment source; the amount will be shown on the statement in a few hou=

rs.



Have Ques=

tions? Please contact us at +1 833 505 2603.




tyle=3D"color: rgb(37, 37, 37);">Here is your order information:
ng>



PC Care&n=

bsp;and Network Protection Shield

>Seller's name: GEEK Squad Inc.
P=

ayment mode: Direct Debit
Renewal=

date: Aug 01, 2023
Next renewal:=

July 31, 2024
Subscription fee: =

$ 389.99



If you be=

lieve there is an error in this transaction or you wish to cancel the =

subscription and want a full refund, please contact us immediately to =

avoid payment disputes.



 
>

Yours res=

pectfully,



Benton Wa=

llace
Sr. Head Consumer Service D=

ept.
Toll-free: +1 833 50=

5 2603
.













--gbWkzYUkHF2=_hrvZQQC1xrS39mR2JnGU1--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA