Monday, August 22, 2022

spam for (808) 649-1232

Geek squad renewel invoice @7627-GFSB-8728
SPF: PASS with IP 209.85.220.41 Learn more
DKIM: 'PASS' with domain gmail.com Learn more
DMARC: 'PASS' Learn more

Received: by 2002:a5d:500e:0:0:0:0:0 with SMTP id e14csp1006425wrt;
        Mon, 22 Aug 2022 15:23:51 -0700 (PDT)
X-Received: by 2002:a17:907:6e14:b0:730:a229:f747 with SMTP id sd20-20020a1709076e1400b00730a229f747mr15107308ejc.202.1661207030931;
        Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1661207030; cv=none;
        d=google.com; s=arc-20160816;
        b=n9Fryd6c7JiNC1Z1tXMEvzy5jDmO/SuBmXT5laG/Lwwrc6wik677cX2qtGRfjGGzNe
         vkRWrL0Y+d3ll389Y/5litDKcPfUmX+xr45+v2Qzf1NLqIXiTmsAiwk+4GXSM308ftt7
         cOhR3eImwlFZragpl4I6LCGUCJD8gGaSztQVGxCcJq4LFjkzfSRPXWxTRSKMX4BjRJWR
         zgvH4A+uWrBCWUf+QZvBn8tXT/FGxRCQBY8NrsreUor2trE97XD7+RCUhM4KZFuwaj3K
         etWcPDGuUgIS5aAWkYWP1YLNLV4tp0B9Wv1nKXp+Lca62UNGUxZkCMwyGdS0E/M/tu1b
         8z8Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:mime-version:dkim-signature;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=FW37pZrPiaj2rtmzeZ/cWKH16Kb0jIAfOz9tfajxBMb1URZfX1HcZW2VRzeHun4blw
         qKl6CaaLlB22Xr8glQJxjXG90CU3IsHkViPdYnCSdrKGrIDXLq9nZBca5eOzaawXFtl4
         bD120DHFwhxBmjZqTPG9IBWjzk4vgzCQ24wQ7c00XZPkawm7u5TjOzWcNBk3wlpkupaq
         9n6W+YCi2dpknH01ckP3kutzTpu61SkQnjtyYiPTGuTqsK9VMJkkq3RsWAYCbx5pWY3u
         yo7dhymIw7DtX3q724jDj3FYyqc/vQP7Y6GUhzv68bJ0HHsIQNmtRmLIryDJDnhxzQAT
         Z7ag==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
       spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <palomegiselle46897@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id j1-20020a17090686c100b007309e352b45sor1299814ejy.21.2022.08.22.15.23.50
        for <atcurtis@gmail.com>
        (Google Transport Security);
        Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
       spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:mime-version:from:to:cc;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=f3/w/qWzM29s7sBRBN5woh8qoC4YRsHuIXGGhETjZyPpZ+TKU5ezVgo1O/ZdJvK6Og
         WL98cdekhJttu9FyBfLh9fwEnTp8hdPdWTWCuqhcakYieF4LagcBmwZBRKdilT7vSECT
         ezMCeI9RKNQ0anTYmOWr1oeo3FBpCblrVS1K1m7tkowJS7ZtouRwwrhgJt0xY6lG6C0+
         ghad1x+NdkpWVwvw1jF3bOGMqCZEz0abwSDjZ/u9KNXeY8+mtPZPq0832Ah8PlzmMgWm
         Drd2Q963htAr1/Jxs9EqQfZfdrvZZ8mD2VBc3fSbokESarFwCxIIG2BnCf15Yqj9bBf7
         dTaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
         :from:to:cc;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=TDCA348RL7D90ViJvXFI2Tg571JK7MXC34Ayi1ePVspQ3WxLmb28Eyc012DUQNODOk
         Qu1pLZ0U4uGUkkvZDzIyhbYvKdJi/BSg1Ok3kt5OlojORMcnkvgoXeRQmYD0K55JbEXI
         31aLd37iz4ZdMfu/R4Ksm6VXfTSN2dweLLYs50yDnNiCY8Js5DOyYQm5CPnGlRtHOyd3
         t2USBU0VTIMJlEHqnBDeRUkx+n8xshlHgxODutu5iTnJ4kSRfVz1CodzzcQaANKLCamf
         cDzpz/CTztAUfVrTQDfpUNp0nK3oo3EEFsZhHZKdVcMgplbkYugNIKPtxb4Nk1LeeFSf
         gYMw==
X-Gm-Message-State: ACgBeo0w+5c8FHz0YNUpXdBjhpaelBmttIGTfPPGGEFWeGjORFjYnxVN Uxo9/OC5t6KTtPSKyx2JUPkB19ruYJw/qphDz1w=
X-Google-Smtp-Source: AA6agR5lmsenmxQBpfOJfD6n8GU5UBh5QPOpZpU4oy0GICrLq+MzGBXnpV4J7KBkPLrS6+fcxdUdL81qiDyQFo0kmiI=
X-Received: by 2002:a17:907:b02:b0:731:3f2d:f09 with SMTP id h2-20020a1709070b0200b007313f2d0f09mr14711241ejl.122.1661207029606; Mon, 22 Aug 2022 15:23:49 -0700 (PDT)
MIME-Version: 1.0
From: Palome Giselle <palomegiselle46897@gmail.com>
Date: Mon, 22 Aug 2022 15:23:37 -0700
Message-ID: <CAMK_9M4YLCOjSF+ukY+anBs=fecrGetop=KN1uyONO5Jy9a+5g@mail.gmail.com>
Subject: Geek squad renewel invoice @7627-GFSB-8728
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary="000000000000e68fc405e6dbe69e"

--000000000000e68fc405e6dbe69e
Content-Type: multipart/alternative; boundary="000000000000e68fc205e6dbe69c"

--000000000000e68fc205e6dbe69c
Content-Type: text/plain; charset="UTF-8"

DEAR USER,

--000000000000e68fc205e6dbe69c
Content-Type: text/html; charset="UTF-8"

<div dir="ltr">DEAR USER,<br></div>

--000000000000e68fc205e6dbe69c--
--000000000000e68fc405e6dbe69e
Content-Type: image/jpeg; name="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Disposition: attachment; filename="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Transfer-Encoding: base64
Content-ID: <f_l75bqft70>
X-Attachment-Id: f_l75bqft70


--000000000000e68fc405e6dbe69e--

Friday, August 19, 2022

spam for nx.tn from (469) 542-0298

Spammer Domain name.........: nx.tn
Details:
Creation date.......: 19-01-2020 21:20:02 GMT+1
Domain status.......: Active
Registrar...........: ELB
Owner Contact
Name................: IDNexus
First name..........:
Address.............: Batang, Jawa Tengah, 51212, Indonesia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Administrativ contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Technical contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net

Wednesday, August 10, 2022

spam email for (866) 208-3445



Hi Prime Member;

Your Annual product subscription for 
NORTON Total All Round Security has been renewed AND updated successfully.

The charged amount will be available within the next 24 to 48 hrs on your profile of account.


_PRODUCT INFO_
INVOICE ID @     FJF10082022NO
Item Title @     NORTON Total All Round Security
START DATE @     10 Aug 2022


End Date @     One year from START DATE
Grand Total @     $262.23USD
Method Of Payment @     Debit from account

If you wish to not to continue and ask for a REFUND then please feel free to call our BILLING & SETTLEMENT DEPARTMENT as soon as possible!



You can Reach us on :  +1 – ( 866 ) – ( 208 ) – 3445

Monday, July 25, 2022

spam SMS from (760) 910-1651


Phishing attempt from site secu05-my-weiis dot com.

Domain Name: SECU05-MY-WEIIS.COM
Registry Domain ID: 2713495364_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2022-07-25T18:47:51Z