Scam email

On Wed., 1 Jul. 2020 at 12:38 p.m., Auto-Renewal
<*** Email address is removed for privacy ***> wrote:

Hi,


Your subscription for Windows Defender has been successfully renewed and updated.

PRODUCT INFORMATION

Product Name 
    Windows Defender Firewall
Order Date        
    JULY- 01-2020
Expiration Date :      1 Year from the date of purchase
Price                    
    $249.99
Payment Method
Auto-Renewal
 
If you feel this is an unauthorized transaction, please contact our billing department as soon as possible.
You can reach us on +1  
(866) 256-6367  

 Regards,
Ronn Sully

Hi there SusanGittens-Herbert, I will be your Independent Advisor for today, I hope we can both resolve your problem.

It is indeed a scam email.
Please fill up the form in this link to report it directly to Microsoft

https://www.microsoft.com/en-us/concern/scam?rtc=1

15 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

New email thread with header

From: "Microsoft Team " <*** Email address is removed for privacy ***>

Subject: ! Thank you for renewal  !

Date: July 14, 2020 at 11:33:38 AM EDT

To: <>

—— Email Header ——

Content-Type: multipart/alternative; boundary="----=_NextPart_000_0A0B_01D65A22.57BF6FC0"

X-Cmae-Envelope: MS4wfG6BquMFwmcy1jFmMFzi2vAI8RuLoymyQWBvyPRFzk4Vn0grMYWkd8GaoaEXATNPnH4+eEbeYn0TRhViCFuhS8NPwy2boGq/x99R+fvBYkA5qYMMsJ6R WPe0h6kr++mdLgNxa3WWnlw8+TZoSRiKvgh99BsNQlbn1O30kXSE08kWpzzCkbyS0FrTzZhPRpAyFg==

X-Cmae-Analysis: v=2.3 cv=A4gSwJeG c=1 sm=1 tr=0 cx=a_idp_nop a=cZ1XAGgeZMV5Y94uO/xBHw==:117 a=8A7brI4kjU8C6ETGAX3PRdgeao0=:19 a=xqWC_Br6kY4A:10 a=x7bEGLp0ZPQA:10 a=ZOtVeOpMzeQA:10 a=_RQrkK6FrEwA:10 a=DAwyPP_o2Byb1YXLmDAA:9 a=xeWK81yVAAAA:8 a=gzWHIzx6AAAA:8 a=QLZDQRN0oOac39z2grsA:9 a=3U7tBFEKjkeyNjtP:21 a=S1RPEKCstLEMYJ9h:21 a=UAVRJdkkkM0A:10 a=thM3C7q52NoA:10 a=PGVyzDU5nY4A:10 a=7yNC-3N_HxMA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=s7dKy51nhZwyzpiQM7AA:9 a=wYoiSs-S7WkmthGg:21 a=7eWNQcToI65S8SxW:21 a=khyNorgnsix03i9b:21 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=frz4AuCg-hUA:10 a=gkm-1hLylLIQJW28diPG:22 a=l6aarNTTTlVzNwJt_BMF:22

Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:mime-version:thread-index :content-language; bh=ZmFMaoBOo1JYB6jDNrGsqKEQJQzXX72rih0M+MGsnvE=; b=XOlyH/DdpStA3Z0+Uv2MUnIgY7LJwfeeLka2HtbPouomrg7I0xmWdaoAEUCyzWmdAN /oNC189kYXgobRQ36GnTLlgyswmiGD52V906tIYTVP1/fbxNjcCIBX5tQZQfdlpWitfp P8Y4jGxvD0ZUfomyDJ6ykIEcqtY0ZOZ15Wi74ozidaocPNT5l2az1BsLWv0b+r7Swdac lQt1iRufOnb45SnQ8KPQSWnitYn19DWTbLXomVXXrRiKCKdfuNmysfcf+9CW6N5PvxDJ tHKKmxH5Cs2BwFRFXAZiH3RvX1oyLH2jSF2NihwyaT+TAeRUTYhuhDKeYOXg8P1PU68k EvpA==

Return-Path: <*** Email address is removed for privacy ***>

X-Mailer: Microsoft Office Outlook 12.0

Content-Language: en-in

X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :thread-index:content-language; bh=ZmFMaoBOo1JYB6jDNrGsqKEQJQzXX72rih0M+MGsnvE=; b=A7p/Uu57yhvvXjHMujLC6nXjrJnu7cBU8eVqqxTBOZ4FPmNgVaH6B2I+XdqAQeX3Xo zqKiRVN4VBhVWMsAeTTclIVKk6Jo5PTcH2TZ8CMF1eSO4oTCmEJTYHixuluifbPLzu8u ccgHA3wSedZkV2UzKwHZz1MncDHpxLe4MiZcT0yOFlPmnHR0bh4C0csdC6t75FkS3DAu /FHit/WtzOgniuASE5GeE7g0g8EGzdy/F22VKx/csbb3TJAHVnAoSsSqhawEwB+ZAQdI tdwQI7GqABT8QuOT3MCcwHiRaAur1zZKowxvaUkDKir2fe+YUzzjl9yAteuyylPgaT45 7usw==

X-Received: by 2002:a17:902:c38b:: with SMTP id g11mr4264889plg.340.1594740863293; Tue, 14 Jul 2020 08:34:23 -0700 (PDT)

Thread-Index: AdZZ9BNKvQzONvijQrGBf7CWTLO7kQ==

Received: (qmail 969 invoked by uid 30297); 14 Jul 2020 15:34:24 -0000

Received: from unknown (HELO p3plibsmtp02-15.prod.phx3.secureserver.net) ([68.178.213.15]) (envelope-sender <*** Email address is removed for privacy ***>) by p3plsmtp24-02-26.prod.phx3.secureserver.net (qmail-1.03) with SMTP for <>; 14 Jul 2020 15:34:24 -0000

Received: from mail-pj1-f66.google.com ([209.85.216.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits) (Client did not present a certificate) by CMGW with ESMTP id vMwpjEg7NTaPsvMwqj99Vr; Tue, 14 Jul 2020 08:34:24 -0700

Received: by mail-pj1-f66.google.com with SMTP id k5so1691646pjg.3 for <>; Tue, 14 Jul 2020 08:34:24 -0700 (PDT)

Received: from Agent5PC ([2405:204:3488:6db6:95b4:f7fe:971d:23a2]) by smtp.gmail.com with ESMTPSA id o12sm18335268pfu.188.2020.07.14.08.34.21 for <> (version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128); Tue, 14 Jul 2020 08:34:22 -0700 (PDT)

<0a0a01d659f4$3e0733c0$ba159b40$@com>

X-Gm-Message-State: AOAM531uWIC8MjGi/cVDE7YQgsqIeAfCVELQiz7I7jWGB9BHJYTABnup CZrnHhgbUPtwhlpDeDMkQGk2IlUPW4k=

X-Nonspam: None

X-Google-Smtp-Source: ABdhPJxfPS9jgpJdZDZQ8J4d31lwvK7mhyirGKChWB47C4s8X5G3+dLeAm9OBUTRVZdWj/Z6WvSrQQ==

————————

Dear xxxx,

*** Email address is removed for privacy ***

PRODUCT INFORMATION

Product ID              :   US-876549395

Product Name      :   Defender Firewall

Expiration Date    :   1 Year from the date of purchase

Auto Renewal Amount:  199.99 USD

 

If you feel this is an unauthorized transaction, please contact our billing department as soon as possible.

For refunds & cancellations, please contact our cancellation department and verify your identity. You can reach us on  (1.205.894.7037)

Or Chat with Our Support Team - : https://tawk.to/chat/5f0c570467771f3813c0f120/default

Regards,

Jordan Smith

Manager- Technical Department

Corporate Office- 815 Market Street

San Francisco, CA

USA, 94103

Contact Number- (1.205.894.7037)

 

25 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated April 26, 2022 Views 3,374 Applies to: