Geek Squad phish from Microsoft Outklook Part 2

BCL:0;ARA:1444111002|970799063|9000799056|26130799012|4040799016|22000799015|1680799066|24102599021|26000799027|9020799019|6092099016|9400799043|34130799006|32020799003|29080799009|5149299006|3069299007|3151999006|16200799027|5139299004|26104999009|440099028|3412199025|4302099013|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?VzRMUDRQKzluL3ZhZTZOZDF4dzZweVcyRmR6TlNnaWtodEVVSTRQWXF4R1o0?=

=?utf-8?B?bjJXTE1EVXlkN0ZRV2VIN3NIR2ZIOG5ldjlRNStVZllwb2QzbGVpaFIwZk1I?=

=?utf-8?B?ZTNTZ29EdWUxcHkxeWZTNEE0NWNtRDZlK1p1MlltV1ViOEJROTFwL0JJRjJM?=

=?utf-8?B?VWNjRnB0Z1k5ZW0zalZIMjFrSVRuQXI0VkM1eEdjRTlwSlV0ZVoxenJFblJE?=

=?utf-8?B?ZFVxUlVOUDZPREYwOGFYQ2JaWVBRZm1PNmloTXo1SVhGbVhaUGpua2xtUWNh?=

=?utf-8?B?WDRnbmNDN1RpR0czVXpBZnpycCtVb0xObW5vZUhIalB2QitVUEFpWG1xRy9S?=

=?utf-8?B?dWJtdXVMUmdWMFA2M3JwN3RoNFVaM2gvQkovWXR0QXdqeU56S2xORk5jTXJB?=

=?utf-8?B?T3VRa3VMd0JxMU9Fak9lTWNHaUdBQzNpQlhrdjFRUU80eENyQ2ovWnl6ZnRM?=

=?utf-8?B?Nyt3aDROdm1LSy9tYkVqSE1udTF6elMrbTlnSis0aENQUDlTL1kyemZSWkgv?=

=?utf-8?B?M2d0NEF5Z0U4aloxUVI5MHA0QmpWeGFDZ1h6OVpZbTlkMjZGK2NxMzlwSWVw?=

=?utf-8?B?dk9jNlY1SDlTZWtQd01XakNoaC9Yb2FISVAzU3dsRTBuZ0FkbVIwS3BEYnhh?=

=?utf-8?B?TjNzUnNBOEF0anBBV29WSmw3UlhXT0VmRjUxSVg0SHJQQkZFeHU0S0NiVmQ3?=

=?utf-8?B?azgxSTZJdE9pWWFSVHRBVFVnMnZ4ZXNJUXljS0tMYXh1aEgxQkkwZjYxZFh6?=

=?utf-8?B?Z3loK05OUFZXb3Jsb2JwVUJuTCtIQTUza0lBSk8xejFWbklZQ2JlVTdadVlB?=

=?utf-8?B?QnlRS095cVpYTGp6OXVWcm9tT0NlTHJlUXZFNWJ1ZDJ2S2x2VVdqYUJnSzNG?=

=?utf-8?B?R2FhSlQvc2ltNmJUcFZoYVM2b0RJMXdlVjNPTEZLckdvMFhEalJieDB6WW01?=

=?utf-8?B?ZmQ1TEZzQWNzdmtLcnUyWm5UeXNCdnlHVCtoaDhTaTlJYzFFUnVLb053cGFr?=

=?utf-8?B?WWRYeThTV2E1ZDh5M2ZGYktmbXR6dFhBVkJEWXQvNUd6dG0vM241cG1YeTQr?=

=?utf-8?B?ZFo3K2FWU0lJVkI5Y0xTU0d1czdkOHpFQ0hyUkF2NGorOW5wTmlpRkpSb0tO?=

=?utf-8?B?V2dRak43d0c3cGVLaVowbzczMVlJQUNvb1hrTzJTUEs2UFdETTAzUGl0VEdE?=

=?utf-8?B?S0dkZXZ5a1JON0xkZVd0U1hKcFVFOU9haHY3R3h5YzZSTkFTaUxZanlXTTly?=

=?utf-8?B?NzFLRDR5djNEWW5oR25HejJJUzM2Q1FPeHZ0MWJQUXFBOFJNRDE3YnkzbEdK?=

=?utf-8?B?Um9Vd2FXTTVvakM4Y2RqNU1IWS9Va2oxbkRKK1Z5U2g1NlFJdlRtaGE2SXJY?=

=?utf-8?B?TEtCL2Y5YkdWZFRkQlNJSFNFODZjVzNvWmoxaDNRMWhQQWN5dXFrZzRxQ0M5?=

=?utf-8?B?UTF5ZEIrOWpZRmFOcHdvYlQ1L00rcHUyRDU2M21ZWTdVMmJ2TDF0UFRWWXg2?=

=?utf-8?B?OUhLQlRlajlBdHFmeUJQWmRkNnp5aElzTTR2MklhUDhwYjZJZnY4aGRwV3Bl?=

=?utf-8?B?bzYyVzZTcTR3V3hKSEt0cGh0Nk5NRFdtbHRpSXFLOWhUT1FmQk9MMWpjV2lL?=

=?utf-8?B?RlhUMkFmbGtubEZwNXBLalZNY3BnYXVyeTNjY3Z1WDlieHI4dUw5ekNPY3dH?=

=?utf-8?B?NVlzZ096eUtsdWdLRUovcjZLbW9mbytnTUdyWVhwVkU5OUJISzg4TDV6MU5k?=

=?utf-8?B?dHlEOG9aaXZ2K1NwY0t5ZnBxYVhxaWNmYklBMWlPemZXajFLcjRhTm93M2ZZ?=

=?utf-8?B?YlVPMEZoUlRtY090Mk4zd1A2YVo1eW1zWUxsdWRUdDA1MlY2RkM4T0lBYXM5?=

=?utf-8?B?cnJPWFpFU1NVUWVsbkE5VE9TcEVsVjVMMjhWVk96dFJvNy9ieTdtemVFVE5o?=

=?utf-8?B?ZUlGNDJVaUVEWjRNMlBFMUdORkllQmhXQ3hiMWpHU09pMndVb2xFUUorYkpS?=

=?utf-8?B?R2xGbS9kb1dFVXBxV2NoUi9YU2cwWk1xRmFFQTlZTnM3K1o1S1gwODZ2d1BS?=

=?utf-8?B?Rkk5ejVseDhoT3BYWHZkNDFuY1RDU1A0Wm9zeTM1dXBxNnI5ZGc4R1dGMlA4?=

=?utf-8?B?L1R3ZFMvSXhISUw5c1JHazZ1T1pxV1NwSVhMOTJMOTUrMFE1WkxLT08raXVt?=

=?utf-8?B?MnNCR0VJNFJ2c0JNNDFxSzU0d1N1cXVYRFVqcXdlMC9VUWNuVU9Mek1nMzdz?=

=?utf-8?B?VHRzaXRSN2xqRVJ5NDdodTVuTnZxNitXM1V5Z1ZvUjJteE9HMHhaUE9JWGFE?=

=?utf-8?B?TnR0dVJ0QWhFaEduQkR0MkZnTC9XSWZOYUZvR2NlS3RHY0RBVmQ1QlZPTURP?=

=?utf-8?B?a1NjWnkwendRdmh2aGx3SVIxTEs5aFpNcnJRc0V3UHRlakNtUlp1dnBJOU4x?=

=?utf-8?B?SFNQYU5vaUxmMGlSQ2JlcEFwOU50L2FYbU5LcEIvQlFuRkNWMExMY2JVM1Zv?=

=?utf-8?B?ZjZyV01EV1NzZkVvUDIyYmR1MnUwdHdzRW90SGIvTUhTanZJVzRUUmxWZFR4?=

=?utf-8?B?K3FPTEZuNHV2SHJwZGtrV1hyck1tMWdGcjNKeGtmcUxsRS9WSjJEZFo3Sjli?=

=?utf-8?B?MWVNdE53eXVaVmJJdFNVaWVYaFN6ZDk0QlBhbTFNci80TzFmUDZGaENuSXQ2?=

=?utf-8?B?T2ZIelEwVHQzODl4V3M0eW9XN083b3Ztd1F2OC9aMitzM2Z0bC9QK1pBMWpm?=

=?utf-8?B?WG1OL01LemsxVk9uc05jWmRyZUVRS20xNFJqOXF1RlVPbEhJOGN6aVhmL3Z1?=

=?utf-8?B?MDdlOFpNM3F4M0hqV0liQjFyaU8wL2k3b21Rd0NEQXFNUlRxM1NsSi9VZWJM?=

=?utf-8?B?dTAyMjdoREFNVFM1cnBLYXdLcDYybUt0ZHMxVnpPdys2dkNHRUJWWS9rZHla?=

=?utf-8?B?QkVZZ2s3b0xqUk43TktyUThVV0ZGclB5RDdOZk1CVlJ3VlphOGtBeThjUzZB?=

=?utf-8?B?UWUvNkg2S2RIL29xemthVy9OZzdrUmVzcnNMeloyL2ZZd1lGRDNDTGlDTlNI?=

=?utf-8?B?c1J3K2R3U3FTc1N1OWdnbHdLNld2dTFwNFRYN1hNL0RvL2xVM0Z0SkNuNTFX?=

=?utf-8?B?OUFCajJ6eWRFYUw3OTAzaTdPRHkzVTQ2UWRXY28vNS80UVI3eW9mSDN3dlZa?=

=?utf-8?B?ZHZlSkJhSW94QUZBZU43WHBOQTEyOUZpcm9MbFUvbkVUSzRoM3lyUHFVQVBX?=

=?utf-8?B?VlVvVUlUbm1WWG1CbjBBK1pLdVdBMEZVeDVpWW1CWGdnbE53S1ZNalFZb0F3?=

=?utf-8?B?ZStmcHdNcFdGalVoY0ExM2xidkVVVmF1eGNGcUlEY2FGcGo2MCtHSlhYbndu?=

=?utf-8?Q?DmJJR8FPYgvq5D63VR/Y7?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jun 2026 15:19:02.5575

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 9efdcb59-82c2-48bc-afa2-08ded2cd16ce

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000C6187.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH3PPF960B3E6E3

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Geek Squad phish from Microsoft Outklook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jun 2026 13:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wcpPZ-00000000Ojp-2djh

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jun 2026 13:06:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 Jun 2026 13:06:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-centralusazlp17010035.outbound.protection.outlook.com ([40.93.8.35]:37329 helo=DM1PR04CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wcls4-00000000CRu-0BfP

for doctor@doctor.nl2k.ab.ca;

Thu, 25 Jun 2026 09:20:19 -0600

Received: from MW4P223CA0005.NAMP223.PROD.OUTLOOK.COM (2603:10b6:303:80::10)

by PH3PPF960B3E6E3.namprd18.prod.outlook.com (2603:10b6:518:1::cb6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.13; Thu, 25 Jun

2026 15:19:02 +0000

Received: from MWH0EPF000C6187.namprd02.prod.outlook.com

(2603:10b6:303:80:cafe::8f) by MW4P223CA0005.outlook.office365.com

(2603:10b6:303:80::10) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.14 via Frontend Transport; Thu,

25 Jun 2026 15:19:02 +0000

Authentication-Results: spf=pass (sender IP is 209.85.221.69)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.221.69 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.221.69; helo=mail-wr1-f69.google.com; pr=C

Received: from mail-wr1-f69.google.com (209.85.221.69) by

MWH0EPF000C6187.mail.protection.outlook.com (10.167.249.119) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6

via Frontend Transport; Thu, 25 Jun 2026 15:19:02 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:F141333EF5E4936557203ED4AAFFA805A6EB1FE6B9579EB1CE82575056632421;UpperCasedChecksum:B4DA9A8DBF763BDC9A17FB2740E971906B2C01EB9441C66D8DB684EE99374928;SizeAsReceived:3379;Count:15

Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-4625e71d3ccso943137f8f.0

for ; Thu, 25 Jun 2026 08:19:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1782400741; x=1783005541; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=tPPb0Oa2/+Ql3OpgPPq6cmObf6tkZUsn4ifL5uC5i8I=;

b=ZI7btDFj9PmlaYlbih+FRMykMho9mIe0mhOD2QuN1Lavd4Cua+l2qdubWyg7InaYGI

m79RIDLChLBLSpunIr4SIoosEV0VRIcD8248TTma2Lq3Rc7iiHIh4akQnLzK5KcAkQwd

nPA3V/6MnvBhdAuKpa3I/M2BnvUNPkwBU2egWORCgzWpQCQZH3kGKR8Y4XbcUTPLvLjB

Qj09uHFidj5ZPLEBGq2TkVeCSbSj6dzC65SJAIZHzIPat4q5z0OjHxXqsalMzg/7W93/

DK/mzQCtzCU+ln66j54Rj5BwSUs2I07T43r9Ix44OlhORLZ9I+b7ijSDdtGvBm1rjktB

uA2w==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1782400741; x=1783005541; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=tPPb0Oa2/+Ql3OpgPPq6cmObf6tkZUsn4ifL5uC5i8I=;

b=MaBc7MO6miswTEVafv/ePfDPyk8hjLDZFOmfbtnygRpgPnkr9NwRQ84FFqKNa/cic0

53Y3IXawsg4mqk6es7QD8Xn6r4/3HF82SjYziLNMEElOD8aVyi1ZPUQdROLnHw+63Dh0

DWazf7xNTHLNvjrct+vHjgOXyoG+nK+CDBE07hFSORHq/n5OMzHDn0z0iGip2rwirWGL

XxD16sVJAieyDaG4Q39rXAFni2xnz56gd/O6SCc08x4maM+FEsywOpz7Q3Q1nujZJm+n

XpmIm+VztkUyxGmXCelPkR5Wp7Rjz4/0trgSSZ2UsP/JA76FaSO1/v+P4yfGI72RxBAA

k0Lw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782400741; x=1783005541;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=tPPb0Oa2/+Ql3OpgPPq6cmObf6tkZUsn4ifL5uC5i8I=;

b=RO0fQGaxgTTF/GXgGDRhy4oDacxqU22zf9JwNjAXQGKxpF4P63740n5gDaZzvMfoje

XJOOXOgJ03otfqN02O5KhM1CTUnpNSy0PzGTZVxVJc0tGh1l+j4PmpNxemUt4a+l+aGg

q7iVScCdGxTg7b5kRrhrbzB6/eMeQTuO9iMVtyq02paFKz//o6yXGcUq+HHACAh2fekl

JFViI3K0tqYGKpMIhxgsK5yMsKfsaQtUcmqIp/xO1KTZq/YXhHySUFZoHOREIu+FKe9u

PVZurRQX/fVZIPvnT3B67Nv5uWPAJ+c01rO04uVRUmxXB8Kh19jS/j/ZBqJwgQJS1GZJ

V7aA==

X-Gm-Message-State: AOJu0YzlrmOQkWUQkNoygTZ3rvmg/THUhi6UxAcKhkwnRrzdNitryrvB

E5WcrjGAyFiEwhngq2BuTbCezxREjEXWD2Qy4rAn+zcs+hmyFN7du3f0y+wmKFgYI1TqJyvkIhS

5PVtJ8nL3ln5toTJlYHAWCPt6qI5iMwXCGzo=

MIME-Version: 1.0

X-Received: by 2002:a05:600d:8497:20b0:490:af63:2cb1 with SMTP id

5b1f17b1804b1-492663e5d71mr29794855e9.7.1782400740925; Thu, 25 Jun 2026

08:19:00 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Thu, 25 Jun 2026 15:19:00 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Secure_Geek_Squad_Renewal_Alert_=40_=C5=A1t_25=2E?=

=?UTF-8?Q?_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="00000000000002ce9206551583a3"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MWH0EPF000C6187:EE_|PH3PPF960B3E6E3:EE_

X-MS-Office365-Filtering-Correlation-Id: 9efdcb59-82c2-48bc-afa2-08ded2cd16ce

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.221.69

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

Uber eats PAypal Phish from Google Gmail PArt 3

























































































--===============1437407769411554854==--

Uber eats PAypal Phish from Google Gmail PArt 2