20230314_TECH_SUPPORT_SCAM_1

Tech Support SCAM Phone Number: (888) 356-1750

Provider: Inteliquent

E-Mail Address: [email protected]

E-Mail Subject: Thank you for your order / 435987698

E-Mail Snippet: Thanks

Pretends to be vendor: PayPal / McAfee

Hustle description: Sends an e-mail pretending to be an automatic renewal for tech support services from McAfee.  Requests you call the SCAM call center where they will then attempt to bill you for services on your credit card.

Attachment Name: Receipt of Product Payment # XXXXXXXXXXXXXXXX

Attachment snippet:

McAfee- Pay
DATE : 03-14-2023
Your Subscription with McAfee will Renew Today and $419.00 is about to be Debited from your account by Today. The Debited Amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out Customer Help Center +1 (888) 356-1750
Invoice Number : 90865908734987345 Customer ID : HDGF9485MHJ58KG7 Quantity : (One Year Subscription) Subtotal : $419.00 Sales Tax : $0.00 Total : $419.00
If you didn't authorize this Charge, you have 24 Hrs. To cancel & get an instant refund of your annual subscription, please contact our customer care: +1 (888) 356-1750
You're receiving this mail as you've registered on the PayPal App & subscribed to our communication updates.
Digitally Yours , McAfee' PayPal Customer support : +1 (888) 356-1750




Received: from IA1PR05MB9049.namprd05.prod.outlook.com (::1) by
 MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Tue, 14 Mar 2023
 18:09:40 +0000
Received: from MW4PR04CA0153.namprd04.prod.outlook.com (2603:10b6:303:85::8)
 by IA1PR05MB9049.namprd05.prod.outlook.com (2603:10b6:208:38b::18) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.24; Tue, 14 Mar
 2023 18:09:34 +0000
Received: from MW2NAM12FT004.eop-nam12.prod.protection.outlook.com
 (2603:10b6:303:85:cafe::a2) by MW4PR04CA0153.outlook.office365.com
 (2603:10b6:303:85::8) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.26 via Frontend
 Transport; Tue, 14 Mar 2023 18:09:34 +0000
Authentication-Results: spf=pass (sender IP is 209.85.208.46)
 smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
 header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
 reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
 209.85.208.46 as permitted sender) receiver=protection.outlook.com;
 client-ip=209.85.208.46; helo=mail-ed1-f46.google.com; pr=C
Received: from mail-ed1-f46.google.com (209.85.208.46) by
 MW2NAM12FT004.mail.protection.outlook.com (10.13.180.71) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.6199.11 via Frontend Transport; Tue, 14 Mar 2023 18:09:34 +0000
Received: by mail-ed1-f46.google.com with SMTP id r11so13956249edd.5
        for <>; Tue, 14 Mar 2023 11:09:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112; t=1678817371;
        h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
         :date:message-id:reply-to;
        bh=VTrf9Lufdm36YWrTZ1YAPPQ1Paw6v5xGWZo20ssiN54=;
        b=bYmUd1zvJUh087+wFQtQ/Em6RBVFu0QFqy4OoQLTuFg+i4x2hvydUFSX7f9dbQy/4n
         bhlm4Wjokjaxsd+TOb1gPOz++Odd+SNo+2b/IVDYLo+lZbq2I45DsbF4x4p8/GdpKoax
         v70OoHidPgOaDJVctETHb76dkUAgB3WTakIkZabwBhtoQiJX3I5Db1R6Z/x2ITf/am7Z
         bB5+o8gvbKlmEdWy1MoHtz8/Bgc6WDkzsBtBEIxdH/1bYoMX/ZoDo31wNxE0BHNGimvY
         SP0JM2YD3gKSk8SDXTFoCGFqRga/qSPtNIrmolQC6lL0Mgt36m997Xz8LrZrsm8ruYIb
         /K/A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112; t=1678817371;
        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=VTrf9Lufdm36YWrTZ1YAPPQ1Paw6v5xGWZo20ssiN54=;
        b=OKIk6w1o+pQkzDSGMKtwmZTJhW//P8BADqycDPmJV1yTn0kRxrqDfksRhaSQaB9/C6
         eUdwWDE6CjmUDsXAIQWFrmIKQWnxvMbZ3WpOJVJCso2bqi0+qHXbGbSW0dusAdBACQyZ
         5vTYRLsU2zi6ocF0tVW8cAj0uUTVWb8RQ5O6GRE0WvJSNjZButWj7EdUP/D237QP1jwQ
         jkjEXg1J6vCtCwDYW/3y0dn/QThY2Pqn0/bkDwl00iqfXPfnSazYQjpHSWDmLtU2WCrc
         hBESfLhIlkhn2EVqKKkaR7gcBIYY/TZaHY9Cflbrm7iUGGPz3YX7XD9BTqNesRzMYjDG
         QI3g==
X-Gm-Message-State: AO0yUKV2eU4HcPICQTjgi04jwGLkMderFpw9EZF7rm0Y04xJ2vDd4lje
	+AnTY+LzsPvdbtVWLH26ros64nliA6qnAyI3aKQ=
X-Google-Smtp-Source: AK7set/aiPmVZUoOyXaypNveUaKoU+9dB8NVCMBU7ckp1oQj5M0+0Lcy6Y5LrhtIPh/i1pHvWEUxP8rj0+2b+jf+jPw=
X-Received: by 2002:a17:907:d13:b0:926:5020:1421 with SMTP id
 gn19-20020a1709070d1300b0092650201421mr1889281ejc.9.1678817369396; Tue, 14
 Mar 2023 11:09:29 -0700 (PDT)
MIME-Version: 1.0
From: Aronbey Alleyaa <[email protected]>
Date: Tue, 14 Mar 2023 23:39:15 +0530
Message-ID: <CALFdCLxtK18WfgpTReoCfWe_CmJooLF8car=ZcOYiz7hYFnJfQ@mail.gmail.com>
Subject: Thank you for your order / 435987698
To: undisclosed-recipients:;
Bcc:
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 14 Mar 2023 18:09:34.5351
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 d62cbc25-4f81-40a1-6b2c-08db24b7443a
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: MW2NAM12FT004:EE_|IA1PR05MB9049:EE_
X-MS-Exchange-Organization-AuthSource:
 MW2NAM12FT004.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: d62cbc25-4f81-40a1-6b2c-08db24b7443a
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:209.85.208.46;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-ed1-f46.google.com;PTR:mail-ed1-f46.google.com;CAT:SPM;SFS:(13230025)(84050400002)(10202899006)(9402899006)(451199018)(109986016)(6211899006)(804899012)(2202399009);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Mar 2023 18:09:34.4882
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: d62cbc25-4f81-40a1-6b2c-08db24b7443a
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 MW2NAM12FT004.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB9049
X-MS-Exchange-Transport-EndToEndLatency: 00:00:05.6650614
X-MS-Exchange-Processed-By-BccFoldering: 15.20.6178.026
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;

Content-type: multipart/mixed;
	boundary="B_3761728855_359170907"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3761728855_359170907
Content-type: multipart/alternative;
	boundary="B_3761728855_271478194"


--B_3761728855_271478194
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit