{"id":887,"date":"2008-11-11T15:12:26","date_gmt":"2008-11-11T22:12:26","guid":{"rendered":"http:\/\/al6400.com\/blog\/?p=887"},"modified":"2008-11-11T15:12:26","modified_gmt":"2008-11-11T22:12:26","slug":"strange-google-adwords-emails","status":"publish","type":"post","link":"https:\/\/www.al6400.com\/blog\/strange-google-adwords-emails\/","title":{"rendered":"Strange Google Adwords Emails"},"content":{"rendered":"<p>Recently I have been getting a string of e-mails from what it is made out to look like it is from Google to inform me that I have an outstanding balance in regards to an advertising campaign.  Although it pretty much smelled like a phishing scam, here is the e-mail:<\/p>\n<blockquote><p>X-Account-Key: account3<br \/>\nX-UIDL: 1226436490.2587.pt01<br \/>\nX-Mozilla-Status: 0001<br \/>\nX-Mozilla-Status2: 00000000<br \/>\nX-Mozilla-Keys:<br \/>\nReturn-Path: jaye @brady-business.com<br \/>\nReceived: (fqmail 2586 invoked from network); 11 Nov 2008 20:48:10 -0000<br \/>\nReceived: (fqmail 2586 invoked from network); 11 Nov 2008 20:48:10 -0000<br \/>\nReceived: from [81.196.161.83] ([81.196.161.83])<br \/>\nReceived: from [81.196.161.83] by mx2-new.virtu.nl; Tue, 11 Nov 2008 22:48:09 +0200<br \/>\nMessage-ID: &lt;01c9444f$91715a80$53a1c451@jaye><br \/>\nFrom: &#8220;Google AdWords Team&#8221; <adwords @google.com><br \/>\nSubject: Google AdWords Alert<br \/>\nDate: Tue, 11 Nov 2008 22:48:09 +0200<br \/>\nMIME-Version: 1.0<br \/>\nContent-Type: multipart\/alternative;<br \/>\n\tboundary=&#8221;&#8212;-=_NextPart_000_0007_01C9444F.91715A80&#8243;<br \/>\nX-Priority: 3<br \/>\nX-MSMail-Priority: Normal<br \/>\nX-Mailer: Microsoft Outlook Express 6.00.2800.1409<br \/>\nX-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409<\/p>\n<p>This is a multi-part message in MIME format.<\/p>\n<p>&#8212;&#8212;=_NextPart_000_0007_01C9444F.91715A80<br \/>\nContent-Type: text\/plain;<br \/>\n\tcharset=&#8221;Windows-1252&#8243;<br \/>\nContent-Transfer-Encoding: quoted-printable<\/p>\n<p>Hello,<\/p>\n<p>Our attempt to charge your credit card on Tue, 11 Nov 2008 22:48:09 +0200 for your outstanding Google AdWords account balance was declined. Your account is still open. However, your ads have been suspended. Once we are able to charge your card and receive payment for your account balance, we will re-activate your ads.<\/p>\n<p>Please update your billing information, even if you plan to use the same credit card. This will trigger our billing system to try charging your card again. You do not need to contact us to reactivate your<br \/>\naccount.<\/p>\n<p>To update your primary payment information, please follow these steps:<\/p>\n<p>1. Log in to your AdWords account at: http:\/\/adwords.google.com.session-2=2525374183818924502.88451603238622346497.com69.ru<br \/>\n2. Click the &#8216;My Account&#8217; tab.<br \/>\n3. Click &#8216;Billing Preferences&#8217; link.<br \/>\n4. Click Edit next to the appropriate &#8216;Payment Details&#8217; section.<br \/>\n5. Enter your new or updated payment information.<br \/>\n6. Click &#8216;Save Changes&#8217; when you have finished.<\/p>\n<p>In the future, you may wish to use a backup credit card in order to help ensure continuous delivery of your ads. You can add a backup credit card by visiting your Billing Preferences page.<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br \/>\nThis message was sent from a notification-only email address that does<br \/>\nnot accept incoming email. Please do not reply to this message. If you<br \/>\nhave any questions, please visit the Google AdWords Help Centre at<br \/>\nhttps:\/\/adwords.google.com\/support\/?hl=3Den_GB to find answers to<br \/>\nfrequently asked questions and a &#8216;contact us&#8217; link near the bottom of<br \/>\nthe page.<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>Thank you for advertising with Google AdWords.<br \/>\nWe look forward to providing you with the most effective advertising available.<\/p>\n<p>Sincerely,<\/p>\n<p>The Google AdWords Team <\/adwords><\/p><\/blockquote>\n<p>Aside from the fact that I haven\u00e2\u20ac\u2122t used the service for a long time for myself personally, one dead giveaway on how this e-mail wasn\u00e2\u20ac\u2122t legitimate is that the IP address of the e-mail did not seem to originate from Google and at the same time it looked like the sender used Microsoft Outlook to send the message which is something that I have never seen Google do before.<\/p>\n<p>At the same time, I fail to see how the person would benefit in anyway from this as normally for phishing scams the intent is to make you visit a phoney website in an attempt to harvest your personal information. In this case, the url just leads to the Google site.<\/p>\n<p>The Internet might make it a lot easier to do business in, but at the same time that means you will see whole lot more shady practices as well.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recently I have been getting a string of e-mails from what it is made out to look like it is from Google to inform me that I have an outstanding balance in regards to an advertising campaign. Although it pretty much smelled like a phishing scam, here is the e-mail: X-Account-Key: account3 X-UIDL: 1226436490.2587.pt01 X-Mozilla-Status: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":12143,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[4],"tags":[1338,683,1340,1339],"class_list":["post-887","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","tag-google-adwords","tag-identity-theft","tag-internet-safety","tag-phishing-scam"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.al6400.com\/blog\/wp-content\/uploads\/2015\/01\/IMG_0768-1300x866.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VnHC-ej","_links":{"self":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/comments?post=887"}],"version-history":[{"count":0,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/887\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media\/12143"}],"wp:attachment":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media?parent=887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/categories?post=887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/tags?post=887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}