Geek Squad phish from Google gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 15 Aug 2023 15:56:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qW20R-0002Dx-39
for dave@doctor.nl2k.ab.ca;
Tue, 15 Aug 2023 15:55:15 -0600
Resent-From: The Doctor
Resent-Date: Tue, 15 Aug 2023 15:55:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f49.google.com ([209.85.216.49]:48230)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qVyDQ-000FlO-2n
for root@nk.ca;
Tue, 15 Aug 2023 11:52:28 -0600
Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-26948743648so3999943a91.0
for; Tue, 15 Aug 2023 10:50:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1692121820; x=1692726620;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=MnoqFPAQAjbyyyRm/hcmq9vXUXsuhPXAMwVzTvWGjUc=;
b=hPDql1/ZYbjFBQ6t3gh+FfEpecpTzJssilTx5h0nENEwROWzRpiYsXUGzrrSgoTspH
RzNInqjn7IubimsrZY0ICv2sY00spNaLDJozgLFBxHbMKrXdGDIB04eH0vrc2OslyL7O
mB8XMu2XnxSkdrjkq5GJ5GQdj7TconEApmBONMVAEvY1R1Uxwwgxxy/lq3yLbwd72oGg
I4QEOoYpFJ2ZBRO0WjQ0KMWaw7Pib77DVZtv6xVtgrJwJQl8mzJl+fsbZB0CTElY6Hhg
Cy5vTuiQqurnp0kd/np8QYKhaQl1mMfPoUHzYZVhwSoLiDQ35mbmFYIgjgFnyKhf+tBI
tINQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1692121820; x=1692726620;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=MnoqFPAQAjbyyyRm/hcmq9vXUXsuhPXAMwVzTvWGjUc=;
b=F/O1cYGqSpHx4cfaz6y8wVIUveAtHWCj/O6la65ya14m0yXp+kV0VnWGDhAGODtV6C
68RbeYHMnM4n0bDuROwWDyjKRQihdcOtNfI2x5YGD82QcVtp2OK/HyrLY5AtDV/+ahpR
0PojxzHDyOwpL5MNvj/Rco+CbuTRY9A0S7VzmMnxkFxo7DHba3vSkRmc5p1MnKWiv/sH
e47fcKEMyUF9PdUkdXP58PB/u1wPuCvBG9vBi5ujJVjoAURhmZzwVrVigR+arL+ToOjs
FVeqeO9AxF/sTV88PmYF/TKJVgcv90UoPpL4AlX3PskvMgRKVAZWLe3GAd1Tc4sT+hcu
/UMw==
X-Gm-Message-State: AOJu0Yy8QRgEQIrWAjrevAB19bapXXWfPIgta+o2uFC+QCAYs16dsny0
KIWpjl2S5xK79tKeXueIlW49OZSkD7JVhQ==
X-Google-Smtp-Source: AGHT+IEhiiDsj0PPsyJ6c9X3doVez4BhQq6FGkC7rOBRPwPdhd4AkMy9paEWJ+N7aP0a2TaQIo/tUg==
X-Received: by 2002:a17:90a:ba93:b0:268:b64b:f684 with SMTP id t19-20020a17090aba9300b00268b64bf684mr11642731pjr.33.1692121820528;
Tue, 15 Aug 2023 10:50:20 -0700 (PDT)
Received: from 91.196.220.95 ([91.196.220.95])
by smtp.gmail.com with ESMTPSA id t12-20020a1709028c8c00b001b8b4730355sm11338907plo.287.2023.08.15.10.50.18
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 15 Aug 2023 10:50:19 -0700 (PDT)
Message-ID: <64dbbadb.170a0220.63e36.459f@mx.google.com>
From: Geek Squad Billing Solutions
X-Google-Original-From: "Geek Squad Billing Solutions"
Subject: Invoice Alert: Geek Squad Services Renewed Successfully
To: "root"
Content-Type: multipart/alternative; boundary="LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF"
MIME-Version: 1.0
Date: Tue, 15 Aug 2023 23:20:17 +0530
This is a multi-part message in MIME format
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF
Content-Type: text/plain; charset="iso-8859-4"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hey, root@nk.ca,
We extend our warmest gratitude for your unwavering support as a value=
d member since August 14, 2021.
Your current annual subscription, initiated on August 15, 2023, is set=
to remain active until August 14, 2024, unless you choose to make any=
adjustments.
We're pleased to inform you that a payment of $394.95 has been success=
fully processed from your designated payment source. This transaction =
will soon be visible on your banking statement.
Annual Subscription Snapshot:
Receipt Number: 958-3371-20145
Seller: Geek-Squad Inc.
Payment Method: Automatic debit
Estimated Service Tax: $15.00
Subscription Cost: $379.95
Total Amount: $394.95
Please note that unless you decide to cancel your subscription or modi=
fy automatic debit payments, the subscription fee will be deducted ann=
ually.
For inquiries related to cancellations and refunds, our toll-free help=
line is available at +1 (941) 462 3246. Our dedicated team will be del=
ighted to assist you.
Thank you for entrusting us with your subscription. Your confidence in=
our service is deeply appreciated.
With deepest sympathy,
Jean R. Jordan
Head Of Accounts Management Team
Toll-free: +1 (941) 462 3246.
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF
Content-Type: text/html; charset="iso-8859-4"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 15 Aug 2023 15:56:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qW20R-0002Dx-39
for dave@doctor.nl2k.ab.ca;
Tue, 15 Aug 2023 15:55:15 -0600
Resent-From: The Doctor
Resent-Date: Tue, 15 Aug 2023 15:55:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f49.google.com ([209.85.216.49]:48230)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qVyDQ-000FlO-2n
for root@nk.ca;
Tue, 15 Aug 2023 11:52:28 -0600
Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-26948743648so3999943a91.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1692121820; x=1692726620;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=MnoqFPAQAjbyyyRm/hcmq9vXUXsuhPXAMwVzTvWGjUc=;
b=hPDql1/ZYbjFBQ6t3gh+FfEpecpTzJssilTx5h0nENEwROWzRpiYsXUGzrrSgoTspH
RzNInqjn7IubimsrZY0ICv2sY00spNaLDJozgLFBxHbMKrXdGDIB04eH0vrc2OslyL7O
mB8XMu2XnxSkdrjkq5GJ5GQdj7TconEApmBONMVAEvY1R1Uxwwgxxy/lq3yLbwd72oGg
I4QEOoYpFJ2ZBRO0WjQ0KMWaw7Pib77DVZtv6xVtgrJwJQl8mzJl+fsbZB0CTElY6Hhg
Cy5vTuiQqurnp0kd/np8QYKhaQl1mMfPoUHzYZVhwSoLiDQ35mbmFYIgjgFnyKhf+tBI
tINQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1692121820; x=1692726620;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=MnoqFPAQAjbyyyRm/hcmq9vXUXsuhPXAMwVzTvWGjUc=;
b=F/O1cYGqSpHx4cfaz6y8wVIUveAtHWCj/O6la65ya14m0yXp+kV0VnWGDhAGODtV6C
68RbeYHMnM4n0bDuROwWDyjKRQihdcOtNfI2x5YGD82QcVtp2OK/HyrLY5AtDV/+ahpR
0PojxzHDyOwpL5MNvj/Rco+CbuTRY9A0S7VzmMnxkFxo7DHba3vSkRmc5p1MnKWiv/sH
e47fcKEMyUF9PdUkdXP58PB/u1wPuCvBG9vBi5ujJVjoAURhmZzwVrVigR+arL+ToOjs
FVeqeO9AxF/sTV88PmYF/TKJVgcv90UoPpL4AlX3PskvMgRKVAZWLe3GAd1Tc4sT+hcu
/UMw==
X-Gm-Message-State: AOJu0Yy8QRgEQIrWAjrevAB19bapXXWfPIgta+o2uFC+QCAYs16dsny0
KIWpjl2S5xK79tKeXueIlW49OZSkD7JVhQ==
X-Google-Smtp-Source: AGHT+IEhiiDsj0PPsyJ6c9X3doVez4BhQq6FGkC7rOBRPwPdhd4AkMy9paEWJ+N7aP0a2TaQIo/tUg==
X-Received: by 2002:a17:90a:ba93:b0:268:b64b:f684 with SMTP id t19-20020a17090aba9300b00268b64bf684mr11642731pjr.33.1692121820528;
Tue, 15 Aug 2023 10:50:20 -0700 (PDT)
Received: from 91.196.220.95 ([91.196.220.95])
by smtp.gmail.com with ESMTPSA id t12-20020a1709028c8c00b001b8b4730355sm11338907plo.287.2023.08.15.10.50.18
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 15 Aug 2023 10:50:19 -0700 (PDT)
Message-ID: <64dbbadb.170a0220.63e36.459f@mx.google.com>
From: Geek Squad Billing Solutions
X-Google-Original-From: "Geek Squad Billing Solutions"
Subject: Invoice Alert: Geek Squad Services Renewed Successfully
To: "root"
Content-Type: multipart/alternative; boundary="LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF"
MIME-Version: 1.0
Date: Tue, 15 Aug 2023 23:20:17 +0530
This is a multi-part message in MIME format
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF
Content-Type: text/plain; charset="iso-8859-4"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hey, root@nk.ca,
We extend our warmest gratitude for your unwavering support as a value=
d member since August 14, 2021.
Your current annual subscription, initiated on August 15, 2023, is set=
to remain active until August 14, 2024, unless you choose to make any=
adjustments.
We're pleased to inform you that a payment of $394.95 has been success=
fully processed from your designated payment source. This transaction =
will soon be visible on your banking statement.
Annual Subscription Snapshot:
Receipt Number: 958-3371-20145
Seller: Geek-Squad Inc.
Payment Method: Automatic debit
Estimated Service Tax: $15.00
Subscription Cost: $379.95
Total Amount: $394.95
Please note that unless you decide to cancel your subscription or modi=
fy automatic debit payments, the subscription fee will be deducted ann=
ually.
For inquiries related to cancellations and refunds, our toll-free help=
line is available at +1 (941) 462 3246. Our dedicated team will be del=
ighted to assist you.
Thank you for entrusting us with your subscription. Your confidence in=
our service is deeply appreciated.
With deepest sympathy,
Jean R. Jordan
Head Of Accounts Management Team
Toll-free: +1 (941) 462 3246.
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF
Content-Type: text/html; charset="iso-8859-4"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear client root@nk.ca,
We extend our warmest gratitude for your unwavering sup=
port as a valued member since August 14, 2021.
Your current annual subscription, initiated on August 1=
5, 2023, is set to remain active until August 14, 2024, unless you cho=
ose to make any adjustments.
We're pleased to inform you that a payment of $394.95 h=
as been successfully processed from your designated payment source. Th=
is transaction will soon be visible on your banking statement.
Annual Subscription Snapshot:
- Order No.: 958-3371-20145
- Seller: Geek-Squad Inc.
- Payment Method: Automatic debit
- Estimated Service Tax: $15.00
- Subscription Cost: $379.95
- Total Amount: $394.95
Please note that unless you decide to cancel your subsc=
ription or modify automatic debit payments, the subscription fee will =
be deducted annually.
--LG9J=_Dgl8IQs9s5hLcGMasKpf7Hwtx8lF--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments