Geek Squad phish from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Aug 2023 17:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX9Je-000IRj-33

for dave@doctor.nl2k.ab.ca;

Fri, 18 Aug 2023 17:55:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 18 Aug 2023 17:55:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f179.google.com ([209.85.210.179]:62869)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX6FU-000N9J-2k

for doctor@nk.ca;

Fri, 18 Aug 2023 14:39:17 -0600

Received: by mail-pf1-f179.google.com with SMTP id d2e1a72fcca58-68730bafa6bso1698974b3a.1

for ; Fri, 18 Aug 2023 13:37:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692391028; x=1692995828;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=3GCI1+odcGiJWjjTvniCOZTHnOa3n7/tjLuc+4I09RY=;

b=VENhuoPQc1Xp+8z7wlATfznY08nxR5iybPzlAkUp3TRdrMUYgmbaMqmSMQS69pYSwY

X9pvrtqNMcUDMsjnpXcDnqNXYahc/EOZ7Hex7HRUZq6rlJ+bNHGYlJZg7QlhqsKQbIUI

mx8AD0OilbUUvrkUFmlE0QkWNkA9biw1XvzXvkmIUIZjBu/4YtVsB/eQstv4F0+8bjhn

gFJG5jore3Y18rFGSonkBpg/YhMcrZLqbzjRhy0UWP2B4nOvTcVjL9xRcCxaj3n6hXjk

UsBgxX/rOx3x32DFSDtVVdSYDRT20psjOqGGmX4UXj1LC+IRsp/S4qGWyvzFQutgB1g0

iQrg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692391028; x=1692995828;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=3GCI1+odcGiJWjjTvniCOZTHnOa3n7/tjLuc+4I09RY=;

b=lapabk6466hAeagVEcALC3bfi0IUwktc0z2P6JcMUZvgibaCgaU/33diH75VIqauyg

1uXyYOl8Tu9UWW/DJ62BgRY0HkHKomXyMMn792MKTSx66774+DI+zwHoAQpZ2FfeWu+H

vmB7pzWLFuB814rSKDjTTRsD0ttptg3PRG56mF4siZ6+UKBFIDZ591yP2s8W2KU4qko2

i4jr539v6P635KPlhLoBCNkmoJbjssiks10nz4WKvEOZ/7xU0W2xwN1lpqHZ0a9cyFs3

0q8SfkgXe8kragINpVQ78nvQTz5am8LPkGiYjmLBhGfTF4M7La7aI+sGLHTdp/7ooPcX

rC5A==

X-Gm-Message-State: AOJu0YzeOtnGHbn6+xlf/SbzOKJm+8QLGfBgoEp5jspG9YkMK117F0uy

YmMonVaCcN1LkZqyf1JaGRoJm7C7a4u4+t0UICI=

X-Google-Smtp-Source: AGHT+IGksqqGpyJ3aIGvh0IE7cgm8EbapQ6BTu9TswfAPH8o/yyHHmwyqR3o+ui1iJwhPcDfJBWjxA==

X-Received: by 2002:a05:6a20:7489:b0:140:45aa:c601 with SMTP id p9-20020a056a20748900b0014045aac601mr339352pzd.30.1692391028121;

Fri, 18 Aug 2023 13:37:08 -0700 (PDT)

Received: from 83.171.251.128 ([83.171.251.128])

by smtp.gmail.com with ESMTPSA id g21-20020a633755000000b00569368ead4bsm1983685pgn.42.2023.08.18.13.37.06

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 18 Aug 2023 13:37:07 -0700 (PDT)

Message-ID: <64dfd673.630a0220.554bb.4234@mx.google.com>

From: "Allan A. McDonald"

Subject: Locked and Loaded: Your Plan Has Been Auto Renewed.

To: "doctor"

Content-Type: multipart/alternative; boundary="wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy"

MIME-Version: 1.0

Date: Sat, 19 Aug 2023 02:07:08 +0530



This is a multi-part message in MIME format



--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello Dear,

doctor@nk.ca



Annual Contract Renewal Alert!





Thank you for choosing the "GEEK SQUAD" PC Protection Shield.



Your annual subscription plan has been expired today and re-activated =

again through auto renewal on 18 Aug 2023 and will remain active till =

17 Aug 2024.



The subscription charge $ 369.98 will taken from your nominated accoun=

t funds and the charges will reflect in your account statement within =

4 to 24 hours.





For any assistance, please feel free to contact us at +1 801 895 3746.=

(Toll-Free)



Order and Subscription Details Here -:





Invoice Number: 839088680368

Advanced PC Protection Shield

Payment BY: Auto Debit

Quantity: 04 only

Cost: $ 369.98



Please be noted that if you feel you didn=E2=80=99t authorize the char=

ge or you don't want to continue the service, Kindly reach out to us i=

mmediately at +1 801 895 3746.





Warm Wishes!



Allan A. McDonald

Customer Support Team







This is system-generated email. Please do not reply to this email addr=

ess. (1) Call our 24-hour customer care line.





--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline














le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Hello Dear,

erif; font-size: 15px;">

font-family: Calibri, sans-serif; font-size: 15px;">doctor@nk.ca
n>




le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Annual Contract Rene=

wal Alert!







le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Thank you for choosing the "GEEK SQUAD" PC Protection Shield.=




ri, sans-serif; font-size: 15px;">Your annual subscription plan has be=

en expired today and re-activated again through auto renewal on 18 Aug=

2023 and will remain active till 17 Aug 2024.




ri, sans-serif; font-size: 15px;">The subscription charge $ 369.98 wil=

l taken from your nominated account funds and the charges will reflect=

in your account statement within 4 to 24 hours.




le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">For any assistance, please feel free to contact us at 
span>
ns-serif; font-size: 15px;">+1 801 895 3746.

pan style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; fo=

nt-size: 15px;"> 
ng>(Toll-Free)




le=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, seri=

f; font-size: 15px;'>Order a=

nd Subscription Details Here -:

gb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 15px;">
ng style=3D"color: rgb(37, 37, 37);">

7);">




le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Invoice Number: 016852819682

7);">Advanced PC Protection Shield

">Payment BY: Auto Debit
Quantity=

: 04 only
Cost: $ 369.98

p>


le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Please be noted that if you feel you didn=E2=80=99t authorize=

the charge or you don't want to continue the service, Kindly rea=

ch out to us immediately at&=

nbsp;

ily: Calibri, sans-serif; font-size: 15px;">+1 801 895 37=

46
transform: none; text-indent: 0px; letter-spacing: normal; font-family=

: Calibri, sans-serif; font-size: 15px; font-style: normal; font-weigh=

t: 700; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2;=

background-color: rgb(255, 255, 255); font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decor=

ation-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;">.







le=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, seri=

f; font-size: 15px;'>Warm Wishes!




le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Allan A. McDonald

ont-family: Calibri, sans-serif; font-size: 15px;">

yle=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-siz=

e: 15px;">Customer Support Team




le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">

olor: rgb(163, 143, 132); font-family: "Times New Roman", Times, serif=

; font-size: 13px;'>This is system-generated email. Please do =

not reply to this email address. (1) Call our 24-hour customer care li=

ne.













--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA