API tools faq
paste
Advertisement
wavellan

20221223_TECH_SUPPORT_SCAM_1

wavellan
Dec 23rd, 2022 (edited)
133
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.44 KB | None | 0 0
raw download clone embed print report diff
  1. Tech Support SCAM Phone Number: (808) 646-8393
  2.  
  3. Provider: Inteliquent
  4.  
  5. E-Mail Address: [email protected]
  6.  
  7. Pretends to be vendor: Geek Squad
  8.  
  9. Hustle description: Sends an e-mail pretending to be an automatic renewal for tech support services from Geek Squad. Requests you call the SCAM call center where they will then attempt to bill you for services on your credit card.
  10.  
  11. E-Mail snippet:
  12.  
  13. Pitchure
  14. Thursday, December 22, 2022
  15. Order ID: Rakd-6k70xE-CRejJ
  16. Customer Support: (808) 646-8393
  17. YOUR_NAME_HERE, GREETINGS OF THE DAY...
  18. This email is in regards that you have an active membership with us, which is going to be renewed on Thursday, December 22, 2022.
  19. License automatically renewed for 4 years according to the terms of the agreement.
  20. If you need help, please contact our support team on (808) 646-8393
  21. Overview of membership for YOUR_NAME_HERE
  22. Name: YOUR_NAME_HERE
  23. Client number: 476767
  24. User ID: YOUR_EMAIL_HERE
  25. Item: Geek Squad
  26. Quantity: - 1
  27. Tenure: - 4 Year
  28. Payment Mode: - Confirmed
  29. Transaction Id: - 7LP9162ON36401XF
  30. Charged amount: 283.5$
  31. We hope you will take the time to renew your membership and remain a part of our community. It couldn�?Tt be easier.
  32.  
  33. If you have any queries or suggestions, please don�?Tt hesitate to reach out at (808) 646-8393 to see how we can meet your needs. We�?Td love to hear your feedback!
  34. Until next time,
  35. Support Team
  36. Sr. accounts head: CONNOR HAWLEY
  37. Our Mailing Address: 3446 Winder Hwy M#308 Flowery Branch GA 30542 United States
  38. All rights reserved. Terms & conditions | Privacy & cookies policy
  39. Unsubscribe - Unsubscribe Preferences
  40.  
  41.  
  42.  
  43.  
  44. Received: from SN6PR05MB5232.namprd05.prod.outlook.com (2603:10b6:805:e3::29)
  45. by MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Thu, 22 Dec 2022
  46. 15:39:07 +0000
  47. Received: from BN9PR03CA0620.namprd03.prod.outlook.com (2603:10b6:408:106::25)
  48. by SN6PR05MB5232.namprd05.prod.outlook.com (2603:10b6:805:e3::29) with
  49. Microsoft SMTP Server (version=TLS1_2,
  50. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.16; Thu, 22 Dec
  51. 2022 15:39:03 +0000
  52. Received: from BN8NAM12FT013.eop-nam12.prod.protection.outlook.com
  53. (2603:10b6:408:106:cafe::66) by BN9PR03CA0620.outlook.office365.com
  54. (2603:10b6:408:106::25) with Microsoft SMTP Server (version=TLS1_2,
  55. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.21 via Frontend
  56. Transport; Thu, 22 Dec 2022 15:39:03 +0000
  57. Authentication-Results: spf=pass (sender IP is 209.85.214.181)
  58. smtp.mailfrom=gmail.com; dkim=fail (body hash did not verify)
  59. header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
  60. reason=100
  61. Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
  62. 209.85.214.181 as permitted sender) receiver=protection.outlook.com;
  63. client-ip=209.85.214.181; helo=mail-pl1-f181.google.com; pr=C
  64. Received: from mail-pl1-f181.google.com (209.85.214.181) by
  65. BN8NAM12FT013.mail.protection.outlook.com (10.13.182.227) with Microsoft SMTP
  66. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  67. 15.20.5966.7 via Frontend Transport; Thu, 22 Dec 2022 15:39:02 +0000
  68. Received: by mail-pl1-f181.google.com with SMTP id u7so2326551plq.11
  69. for <>; Thu, 22 Dec 2022 07:39:02 -0800 (PST)
  70. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  71. d=gmail.com; s=20210112;
  72. h=priority:importance:content-class:mime-version:message-id:date
  73. :subject:to:from:thread-topic:thread-index:from:to:cc:subject:date
  74. :message-id:reply-to;
  75. bh=V2quldI7mgAr5a8SCd6q6BBwrs/2fnwcr7lwpPIM4Rs=;
  76. b=e45fQYuTn9bsh7COvO3GbIn4yS9UEqTx0SSBRDadLuQds7V0qMcySpup/YG0qCdRK6
  77. KMlOauhtZDIsKn/F4qATg9BOAsKAnxx8EcwEXsdlPxxN+lITAEOOukeNPW5nqJSApRuZ
  78. YRmN2JYCc5VWo9qWAUanQ0gDz+vg5/fdAk90zqDPYSszfIuAdHdWV4deoKaR6qnSmJOB
  79. yMu3tRWiMT0lswDU+iYadKhiXHCPLwyh9hGS5EqutqUxw3RSMamDEBjNVx6tT7ueGaDg
  80. XnWaNcUkizwlw2AKbSdnmeQKmX1OoijzY+vgNM2zmzanhaFOxCFGNzPmq8PVLvislVsG
  81. 4EHw==
  82. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  83. d=1e100.net; s=20210112;
  84. h=priority:importance:content-class:mime-version:message-id:date
  85. :subject:to:from:thread-topic:thread-index:x-gm-message-state:from
  86. :to:cc:subject:date:message-id:reply-to;
  87. bh=V2quldI7mgAr5a8SCd6q6BBwrs/2fnwcr7lwpPIM4Rs=;
  88. b=XbicS+t56Ps2hVDm/tSEQU6liF90YxQegOh77DTkqU+e9rh87+c2plPZpU0UwpVMUy
  89. iYZER/dep6OCSKrp3ivNChSM6sVq3/7BknEv41n9wsGJf5qvIs8imx+k16xKHi/zqOUO
  90. gh/6EYuNo7aWTC6BbQxbkmriMBVOvth4NdaFWYu0hvWMfY9TuOAqQAwi7RW1vu9A27iu
  91. KJXcbyB/FEUQRQie1pdzh4YC2HussG24Eotsg0uMeqy0G5Eb1g9JwGd+oYvHS751XaNu
  92. tYlcVdaLM/lPodWzLo+pcC9QCk+d29rsYCdTIzY+iYz7Xya/RQHuigcs2HdCJ4SBQ56b
  93. DFOw==
  94. X-Gm-Message-State: AFqh2kp8CbKEAWTntTlYsDstOLi5CkmgwUQgJd2JCezYc75gChd3gR2b
  95. 9XdUbZ+g5XjHTv36BWs1k7Ic5bvvPtKYvA==
  96. X-Google-Smtp-Source: AMrXdXu0/SwoVL3tUp5xWuIk1MlS2WYniNooVgvwroaFGoE6+b3S/1gsBSHHlp9MKXQZVLZxO0/kNw==
  97. X-Received: by 2002:a17:90b:190c:b0:223:e5b2:d520 with SMTP id mp12-20020a17090b190c00b00223e5b2d520mr6928913pjb.15.1671723541279;
  98. Thu, 22 Dec 2022 07:39:01 -0800 (PST)
  99. Return-Path: [email protected]
  100. Received: from godvps (48.104.94.34.bc.googleusercontent.com. [34.94.104.48])
  101. by smtp.gmail.com with ESMTPSA id x1-20020a17090aca0100b00225bd8cd45asm256575pjt.29.2022.12.22.07.39.00
  102. for <>
  103. (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
  104. Thu, 22 Dec 2022 07:39:00 -0800 (PST)
  105. thread-index: AdkWG4L+giXFqgcnQG+e5IQ+DyDiQg==
  106. Thread-Topic: Renew today for big savings Thursday, December 22, 2022
  107. From: "YOUR_NAME_HERE" <[email protected]>
  108. To: <>
  109. Subject: Renew today for big savings Thursday, December 22, 2022
  110. Date: Thu, 22 Dec 2022 07:39:00 -0800
  111. Message-ID: <9200F1283D9647B3B7113CC4CAAB7CA8@godvps>
  112. MIME-Version: 1.0
  113. X-Mailer: Microsoft CDO for Windows 2000
  114. Content-Class: urn:content-classes:message
  115. Importance: normal
  116. Priority: normal
  117. X-MimeOLE: Produced By Microsoft MimeOLE
  118. X-MS-Exchange-Organization-ExpirationStartTime: 22 Dec 2022 15:39:03.0398
  119. (UTC)
  120. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  121. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  122. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  123. X-MS-Exchange-Organization-Network-Message-Id:
  124. e840ece6-0c8b-4453-1962-08dae432a72a
  125. X-EOPAttributedMessage: 0
  126. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  127. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  128. X-MS-PublicTrafficType: Email
  129. X-MS-TrafficTypeDiagnostic: BN8NAM12FT013:EE_|SN6PR05MB5232:EE_
  130. X-MS-Exchange-Organization-AuthSource:
  131. BN8NAM12FT013.eop-nam12.prod.protection.outlook.com
  132. X-MS-Exchange-Organization-AuthAs: Anonymous
  133. X-MS-Office365-Filtering-Correlation-Id: e840ece6-0c8b-4453-1962-08dae432a72a
  134. X-MS-Exchange-Organization-SCL: 1
  135. X-Microsoft-Antispam: BCL:0;
  136. X-Forefront-Antispam-Report:
  137. CIP:209.85.214.181;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-pl1-f181.google.com;PTR:mail-pl1-f181.google.com;CAT:NONE;SFS:(13230022)(84530400002)(62800002)(451199015)(2110799006)(8426002)(8676002)(66899015)(1096003)(9576002)(37786003)(19627405001)(22186003)(76482006)(6916009)(5660300002)(26005)(44706002)(33656002)(7596003)(356005)(82202003)(58800400005)(9686003)(44726023)(7636003)(76236004)(426003)(956004)(73392003)(86362001)(55016003)(336012)(83380400001)(40140700001)(33716001)(76899009)(1406899009)(41360500002);DIR:INB;
  138. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Dec 2022 15:39:02.9148
  139. (UTC)
  140. X-MS-Exchange-CrossTenant-Network-Message-Id: e840ece6-0c8b-4453-1962-08dae432a72a
  141. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  142. X-MS-Exchange-CrossTenant-AuthSource:
  143. BN8NAM12FT013.eop-nam12.prod.protection.outlook.com
  144. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  145. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  146. X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB5232
  147. X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.7474235
  148. X-MS-Exchange-Processed-By-BccFoldering: 15.20.5924.016
  149. X-Microsoft-Antispam-Mailbox-Delivery:
  150. ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097);
  151.  
  152. Content-type: multipart/alternative;
  153. boundary="B_3754624158_1575532232"
  154.  
  155. > This message is in MIME format. Since your mail reader does not understand
  156. this format, some or all of this message may not be legible.
  157.  
  158. --B_3754624158_1575532232
  159. Content-type: text/plain;
  160. charset="UTF-8"
  161. Content-transfer-encoding: quoted-printable
  162.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!