Geek Squad phish from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Aug 2023 15:14:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVeob-000Cpt-1s

for dave@doctor.nl2k.ab.ca;

Mon, 14 Aug 2023 15:09:29 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Aug 2023 15:09:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f171.google.com ([209.85.222.171]:47469)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVd9y-000GLQ-2A

for doctor@nk.ca;

Mon, 14 Aug 2023 13:23:29 -0600

Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-76ad842d12fso312524485a.3

for ; Mon, 14 Aug 2023 12:21:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692040881; x=1692645681;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=r9tjiDCBxYhEBZm3o6B04KTvQ7aW2f2w+yLWkCYsdmk=;

b=JlcuTQ5UDtedbMeOhTMznt+rl0lBCxdMDWZFoXQ2zKdjINjzOhGu2BnVLZGdL5Nimq

xwM80wmCva/ULKtPFntDqz+5tjN1sewJljOLD6F7BiI+OEew0plPpHLTKjUmBLW6KqUH

ze8GRvFMjRqhwxOScovffVhzWxSY25GzTgXDZLIU+Dafb1RRWDcnqY8HdoJnsh5w9pPX

oPL4zZCfmKmK8fw/HnsjluVUnXTIZMqtvmPJRNCwdhFEOvzKqGWdGMpcBjmd4ZZWrP2n

uHftniAHUxKUhGZOZP2JWQl327SJFqX29V/Hz6tP5i7pIRrsrvFiK+CW/7XgmIsGR8bW

Ehuw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692040881; x=1692645681;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=r9tjiDCBxYhEBZm3o6B04KTvQ7aW2f2w+yLWkCYsdmk=;

b=S1mu2qHcGCflfsl7pnfntRCmyjQaof4YmqisKkY0zXrHqnOqChsH7fgd8MLt682yJA

PvVqTvu7b9OmVVHQ5C2dVzRnxEiBqpzOzw3TOBLvQJSdQrASL/zwTTdvGNwO9169pi/2

kGHXeZZR5kgyEdYrATh28yCU2xVVqTHlUtKhX0jQa5RBK+HztAYoOKXkq7o0isIdME1Q

V2/kV3T4gdpS55Sa/xuM70e0UDpcaZHFfWSTPR2x69LI/nwJ1wSQHb9brNNIZCkhRm2Q

xR9RfFQZnnDoGpH5qjzbTCvJkjKcyJK23b+HNq0g98JtdaPT3NUtrufEPl+hdjPVRa/M

YORA==

X-Gm-Message-State: AOJu0YwlXi1/Tb3R5h48ap9w7UitfEjRk7RHswJUqJIVKPgBBcW10/ki

nwP/2sLxn3IGQZfZ5UKc7rwh4l45MxnqbwJyAx0=

X-Google-Smtp-Source: AGHT+IE0sRvzZCmWKgRd7TAWEDAzdi0q5Q0asbIqeayMgDML5H4wKTp7K1/OtB5Sz2LLoaLX2SWlag==

X-Received: by 2002:a05:620a:1986:b0:767:eba8:a3b2 with SMTP id bm6-20020a05620a198600b00767eba8a3b2mr12721034qkb.50.1692040881581;

Mon, 14 Aug 2023 12:21:21 -0700 (PDT)

Received: from 153.92.40.249 ([153.92.40.249])

by smtp.gmail.com with ESMTPSA id j7-20020a05620a000700b00767cfb1e859sm3227706qki.47.2023.08.14.12.21.19

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 14 Aug 2023 12:21:21 -0700 (PDT)

Message-ID: <64da7eb1.050a0220.804f.d849@mx.google.com>

From: "Mickey A. Vaughn"

Subject: Plan Renewal Notice#059438

To: "doctor"

Content-Type: multipart/alternative; boundary="3LATxS9oLS=_iHK8Zg6nnV7MVED5VthzTV"

MIME-Version: 1.0

Date: Tue, 15 Aug 2023 00:51:20 +0530



This is a multi-part message in MIME format



--3LATxS9oLS=_iHK8Zg6nnV7MVED5VthzTV

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello Customer, doctor@nk.ca



Annual Transaction: Successful!



This email is to remind you that your last-year PC Care subscription h=

as lapsed today.



Your annual membership (PC Care and Network Protection) has been succe=

ssfully renewed and reactivated in accordance with our contract.



The subscription fee of ($369.99) is automatically debited from the up=

dated payment source; this amount will appear on the statement as a GK=

S*PC charge.



To unregister or stop auto debit - Contact +1 (818) 570-6080.



Here is your order and transaction information :



Invoice number : 974-3881-62715

Description : GEEK Total Protection

Current plan : one-year subscription

Payment method : automatic debit

Renewal date : Aug 14, 2023

Next renewal date : Aug 13, 2024

Subscription charge : $369.99



If you want to unsubscribe or stop auto-debit payments to get a full r=

efund to the original payment source, please contact us right away to =

file a dispute.



Customer Helpline Toll-Free Number : +1 (818) 570-6080.=20



=20



With deepest sympathy,



Mickey A. Vaughn

Sr. Head Consumer Service Dept.





--3LATxS9oLS=_iHK8Zg6nnV7MVED5VthzTV

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Hey Exist=

ing Client , doctor@nk.ca




tyle=3D"color: rgb(37, 37, 37);">Annual Transaction: Successful=

!



This emai=

l is to remind you that your last-year PC Care subscription has lapsed=

today.



Your annu=

al membership (PC Care and Network Protection) has been successfully r=

enewed and reactivated in accordance with our contract.



The subsc=

ription fee of ($369.99) is automatically debited from the updated pay=

ment source; this amount will appear on the statement as a GKS*PC char=

ge.



=

+1 (818) 570-6080
.<=

/strong>




tyle=3D"color: rgb(37, 37, 37);">Here is your order and transaction=

information
:



Invoice n=

umber : 974-3881-62715
Descriptio=

n : GEEK Total Protection
Current=

plan : one-year subscription
Pay=

ment method : automatic debit
Renewal date : Aug 14, 2023

"color: rgb(37, 37, 37);">Next renewal date : Aug 13, 2024

"color: rgb(37, 37, 37);">Subscription charge : $369.99



If you wa=

nt to unsubscribe or stop auto-debit payments to get a full refund to =

the original payment source, please contact us right away to file a di=

spute.



Customer =

Helpline Toll-Free Number : +1 (818) 570-6080
style=3D"color: rgb(37, 37, 37);">. 



 
>

With symp=

athy,



Mickey A.=

Vaughn
Account & Support Helplin=

e Team













--3LATxS9oLS=_iHK8Zg6nnV7MVED5VthzTV--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA