Saturday, September 7, 2024
SMS fake USPS phishing spam
[U.S. Postal Service Notice]: Due to incomplete address information, your parcel is on hold. To avoid having your package returned, please update your address at this link: https://cutt.ly/ We’ll attempt redelivery within 24 hours after receiving the updated address. Have a fantastic day and enjoy the lovely weather!
Monday, August 22, 2022
spam for (808) 649-1232
Geek squad renewel invoice @7627-GFSB-8728
SPF: PASS with IP 209.85.220.41 Learn more
DKIM: 'PASS' with domain gmail.com Learn more
DMARC: 'PASS' Learn more
Received: by 2002:a5d:500e:0:0:0:0:0 with SMTP id e14csp1006425wrt;
Mon, 22 Aug 2022 15:23:51 -0700 (PDT)
X-Received: by 2002:a17:907:6e14:b0:730:a229:f747 with SMTP id sd20-20020a1709076e1400b00730a229f747mr15107308ejc.202.1661207030931;
Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1661207030; cv=none;
d=google.com; s=arc-20160816;
b=n9Fryd6c7JiNC1Z1tXMEvzy5jDmO/SuBmXT5laG/Lwwrc6wik677cX2qtGRfjGGzNe
vkRWrL0Y+d3ll389Y/5litDKcPfUmX+xr45+v2Qzf1NLqIXiTmsAiwk+4GXSM308ftt7
cOhR3eImwlFZragpl4I6LCGUCJD8gGaSztQVGxCcJq4LFjkzfSRPXWxTRSKMX4BjRJWR
zgvH4A+uWrBCWUf+QZvBn8tXT/FGxRCQBY8NrsreUor2trE97XD7+RCUhM4KZFuwaj3K
etWcPDGuUgIS5aAWkYWP1YLNLV4tp0B9Wv1nKXp+Lca62UNGUxZkCMwyGdS0E/M/tu1b
8z8Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
b=FW37pZrPiaj2rtmzeZ/cWKH16Kb0jIAfOz9tfajxBMb1URZfX1HcZW2VRzeHun4blw
qKl6CaaLlB22Xr8glQJxjXG90CU3IsHkViPdYnCSdrKGrIDXLq9nZBca5eOzaawXFtl4
bD120DHFwhxBmjZqTPG9IBWjzk4vgzCQ24wQ7c00XZPkawm7u5TjOzWcNBk3wlpkupaq
9n6W+YCi2dpknH01ckP3kutzTpu61SkQnjtyYiPTGuTqsK9VMJkkq3RsWAYCbx5pWY3u
yo7dhymIw7DtX3q724jDj3FYyqc/vQP7Y6GUhzv68bJ0HHsIQNmtRmLIryDJDnhxzQAT
Z7ag==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <palomegiselle46897@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id j1-20020a17090686c100b007309e352b45sor1299814ejy.21.2022.08.22.15.23.50
for <atcurtis@gmail.com>
(Google Transport Security);
Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
b=f3/w/qWzM29s7sBRBN5woh8qoC4YRsHuIXGGhETjZyPpZ+TKU5ezVgo1O/ZdJvK6Og
WL98cdekhJttu9FyBfLh9fwEnTp8hdPdWTWCuqhcakYieF4LagcBmwZBRKdilT7vSECT
ezMCeI9RKNQ0anTYmOWr1oeo3FBpCblrVS1K1m7tkowJS7ZtouRwwrhgJt0xY6lG6C0+
ghad1x+NdkpWVwvw1jF3bOGMqCZEz0abwSDjZ/u9KNXeY8+mtPZPq0832Ah8PlzmMgWm
Drd2Q963htAr1/Jxs9EqQfZfdrvZZ8mD2VBc3fSbokESarFwCxIIG2BnCf15Yqj9bBf7
dTaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
b=TDCA348RL7D90ViJvXFI2Tg571JK7MXC34Ayi1ePVspQ3WxLmb28Eyc012DUQNODOk
Qu1pLZ0U4uGUkkvZDzIyhbYvKdJi/BSg1Ok3kt5OlojORMcnkvgoXeRQmYD0K55JbEXI
31aLd37iz4ZdMfu/R4Ksm6VXfTSN2dweLLYs50yDnNiCY8Js5DOyYQm5CPnGlRtHOyd3
t2USBU0VTIMJlEHqnBDeRUkx+n8xshlHgxODutu5iTnJ4kSRfVz1CodzzcQaANKLCamf
cDzpz/CTztAUfVrTQDfpUNp0nK3oo3EEFsZhHZKdVcMgplbkYugNIKPtxb4Nk1LeeFSf
gYMw==
X-Gm-Message-State: ACgBeo0w+5c8FHz0YNUpXdBjhpaelBmttIGTfPPGGEFWeGjORFjYnxVN Uxo9/OC5t6KTtPSKyx2JUPkB19ruYJw/qphDz1w=
X-Google-Smtp-Source: AA6agR5lmsenmxQBpfOJfD6n8GU5UBh5QPOpZpU4oy0GICrLq+MzGBXnpV4J7KBkPLrS6+fcxdUdL81qiDyQFo0kmiI=
X-Received: by 2002:a17:907:b02:b0:731:3f2d:f09 with SMTP id h2-20020a1709070b0200b007313f2d0f09mr14711241ejl.122.1661207029606; Mon, 22 Aug 2022 15:23:49 -0700 (PDT)
MIME-Version: 1.0
From: Palome Giselle <palomegiselle46897@gmail.com>
Date: Mon, 22 Aug 2022 15:23:37 -0700
Message-ID: <CAMK_9M4YLCOjSF+ukY+anBs=fecrGetop=KN1uyONO5Jy9a+5g@mail.gmail.com>
Subject: Geek squad renewel invoice @7627-GFSB-8728
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary="000000000000e68fc405e6dbe69e"
--000000000000e68fc405e6dbe69e
Content-Type: multipart/alternative; boundary="000000000000e68fc205e6dbe69c"
--000000000000e68fc205e6dbe69c
Content-Type: text/plain; charset="UTF-8"
DEAR USER,
--000000000000e68fc205e6dbe69c
Content-Type: text/html; charset="UTF-8"
<div dir="ltr">DEAR USER,<br></div>
--000000000000e68fc205e6dbe69c--
--000000000000e68fc405e6dbe69e
Content-Type: image/jpeg; name="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Disposition: attachment; filename="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Transfer-Encoding: base64
Content-ID: <f_l75bqft70>
X-Attachment-Id: f_l75bqft70
--000000000000e68fc405e6dbe69e--
Friday, August 19, 2022
spam for nx.tn from (469) 542-0298
Spammer Domain name.........: nx.tn
Details:
Creation date.......: 19-01-2020 21:20:02 GMT+1
Domain status.......: Active
Registrar...........: ELB
Owner Contact
Name................: IDNexus
First name..........:
Address.............: Batang, Jawa Tengah, 51212, Indonesia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Administrativ contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Technical contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Thursday, August 18, 2022
Wednesday, August 10, 2022
spam email for (866) 208-3445
Hi Prime Member;
Your Annual product subscription for
NORTON Total All Round Security has been renewed AND updated successfully.
The charged amount will be available within the next 24 to 48 hrs on your profile of account.
_PRODUCT INFO_
INVOICE ID @ FJF10082022NO
Item Title @ NORTON Total All Round Security
START DATE @ 10 Aug 2022
End Date @ One year from START DATE
Grand Total @ $262.23USD
Method Of Payment @ Debit from account
If you wish to not to continue and ask for a REFUND then please feel free to call our BILLING & SETTLEMENT DEPARTMENT as soon as possible!
You can Reach us on : +1 – ( 866 ) – ( 208 ) – 3445
Tuesday, August 9, 2022
Monday, July 25, 2022
spam SMS from (760) 910-1651
Phishing attempt from site secu05-my-weiis dot com.
Domain Name: SECU05-MY-WEIIS.COM
Registry Domain ID: 2713495364_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2022-07-25T18:47:51Z
Subscribe to:
Posts (Atom)