Monday, August 22, 2022

spam for (808) 649-1232

Geek squad renewel invoice @7627-GFSB-8728
SPF: PASS with IP 209.85.220.41 Learn more
DKIM: 'PASS' with domain gmail.com Learn more
DMARC: 'PASS' Learn more

Received: by 2002:a5d:500e:0:0:0:0:0 with SMTP id e14csp1006425wrt;
        Mon, 22 Aug 2022 15:23:51 -0700 (PDT)
X-Received: by 2002:a17:907:6e14:b0:730:a229:f747 with SMTP id sd20-20020a1709076e1400b00730a229f747mr15107308ejc.202.1661207030931;
        Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1661207030; cv=none;
        d=google.com; s=arc-20160816;
        b=n9Fryd6c7JiNC1Z1tXMEvzy5jDmO/SuBmXT5laG/Lwwrc6wik677cX2qtGRfjGGzNe
         vkRWrL0Y+d3ll389Y/5litDKcPfUmX+xr45+v2Qzf1NLqIXiTmsAiwk+4GXSM308ftt7
         cOhR3eImwlFZragpl4I6LCGUCJD8gGaSztQVGxCcJq4LFjkzfSRPXWxTRSKMX4BjRJWR
         zgvH4A+uWrBCWUf+QZvBn8tXT/FGxRCQBY8NrsreUor2trE97XD7+RCUhM4KZFuwaj3K
         etWcPDGuUgIS5aAWkYWP1YLNLV4tp0B9Wv1nKXp+Lca62UNGUxZkCMwyGdS0E/M/tu1b
         8z8Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:mime-version:dkim-signature;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=FW37pZrPiaj2rtmzeZ/cWKH16Kb0jIAfOz9tfajxBMb1URZfX1HcZW2VRzeHun4blw
         qKl6CaaLlB22Xr8glQJxjXG90CU3IsHkViPdYnCSdrKGrIDXLq9nZBca5eOzaawXFtl4
         bD120DHFwhxBmjZqTPG9IBWjzk4vgzCQ24wQ7c00XZPkawm7u5TjOzWcNBk3wlpkupaq
         9n6W+YCi2dpknH01ckP3kutzTpu61SkQnjtyYiPTGuTqsK9VMJkkq3RsWAYCbx5pWY3u
         yo7dhymIw7DtX3q724jDj3FYyqc/vQP7Y6GUhzv68bJ0HHsIQNmtRmLIryDJDnhxzQAT
         Z7ag==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
       spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <palomegiselle46897@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id j1-20020a17090686c100b007309e352b45sor1299814ejy.21.2022.08.22.15.23.50
        for <atcurtis@gmail.com>
        (Google Transport Security);
        Mon, 22 Aug 2022 15:23:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20210112 header.b="f3/w/qWz";
       spf=pass (google.com: domain of palomegiselle46897@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=palomegiselle46897@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:mime-version:from:to:cc;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=f3/w/qWzM29s7sBRBN5woh8qoC4YRsHuIXGGhETjZyPpZ+TKU5ezVgo1O/ZdJvK6Og
         WL98cdekhJttu9FyBfLh9fwEnTp8hdPdWTWCuqhcakYieF4LagcBmwZBRKdilT7vSECT
         ezMCeI9RKNQ0anTYmOWr1oeo3FBpCblrVS1K1m7tkowJS7ZtouRwwrhgJt0xY6lG6C0+
         ghad1x+NdkpWVwvw1jF3bOGMqCZEz0abwSDjZ/u9KNXeY8+mtPZPq0832Ah8PlzmMgWm
         Drd2Q963htAr1/Jxs9EqQfZfdrvZZ8mD2VBc3fSbokESarFwCxIIG2BnCf15Yqj9bBf7
         dTaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
         :from:to:cc;
        bh=Z2mFoESloDlkoGGjF2sJhBzx3mcSgDJm3L/Tj46e0Kg=;
        b=TDCA348RL7D90ViJvXFI2Tg571JK7MXC34Ayi1ePVspQ3WxLmb28Eyc012DUQNODOk
         Qu1pLZ0U4uGUkkvZDzIyhbYvKdJi/BSg1Ok3kt5OlojORMcnkvgoXeRQmYD0K55JbEXI
         31aLd37iz4ZdMfu/R4Ksm6VXfTSN2dweLLYs50yDnNiCY8Js5DOyYQm5CPnGlRtHOyd3
         t2USBU0VTIMJlEHqnBDeRUkx+n8xshlHgxODutu5iTnJ4kSRfVz1CodzzcQaANKLCamf
         cDzpz/CTztAUfVrTQDfpUNp0nK3oo3EEFsZhHZKdVcMgplbkYugNIKPtxb4Nk1LeeFSf
         gYMw==
X-Gm-Message-State: ACgBeo0w+5c8FHz0YNUpXdBjhpaelBmttIGTfPPGGEFWeGjORFjYnxVN Uxo9/OC5t6KTtPSKyx2JUPkB19ruYJw/qphDz1w=
X-Google-Smtp-Source: AA6agR5lmsenmxQBpfOJfD6n8GU5UBh5QPOpZpU4oy0GICrLq+MzGBXnpV4J7KBkPLrS6+fcxdUdL81qiDyQFo0kmiI=
X-Received: by 2002:a17:907:b02:b0:731:3f2d:f09 with SMTP id h2-20020a1709070b0200b007313f2d0f09mr14711241ejl.122.1661207029606; Mon, 22 Aug 2022 15:23:49 -0700 (PDT)
MIME-Version: 1.0
From: Palome Giselle <palomegiselle46897@gmail.com>
Date: Mon, 22 Aug 2022 15:23:37 -0700
Message-ID: <CAMK_9M4YLCOjSF+ukY+anBs=fecrGetop=KN1uyONO5Jy9a+5g@mail.gmail.com>
Subject: Geek squad renewel invoice @7627-GFSB-8728
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary="000000000000e68fc405e6dbe69e"

--000000000000e68fc405e6dbe69e
Content-Type: multipart/alternative; boundary="000000000000e68fc205e6dbe69c"

--000000000000e68fc205e6dbe69c
Content-Type: text/plain; charset="UTF-8"

DEAR USER,

--000000000000e68fc205e6dbe69c
Content-Type: text/html; charset="UTF-8"

<div dir="ltr">DEAR USER,<br></div>

--000000000000e68fc205e6dbe69c--
--000000000000e68fc405e6dbe69e
Content-Type: image/jpeg; name="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Disposition: attachment; filename="ORDER INVOICE#87D837868DIUJK.jpg"
Content-Transfer-Encoding: base64
Content-ID: <f_l75bqft70>
X-Attachment-Id: f_l75bqft70


--000000000000e68fc405e6dbe69e--

Friday, August 19, 2022

spam for nx.tn from (469) 542-0298

Spammer Domain name.........: nx.tn
Details:
Creation date.......: 19-01-2020 21:20:02 GMT+1
Domain status.......: Active
Registrar...........: ELB
Owner Contact
Name................: IDNexus
First name..........:
Address.............: Batang, Jawa Tengah, 51212, Indonesia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Administrativ contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net
Technical contact
Name................: IDNexus
First name..........:
Address.............: Batang Jawa Tengah 51212 Indonisia
address2............:
City................:
stateProvince.......:
Zip code............:
Country.............:
Phone...............: 082323611199
Fax.................:
Email...............: domains@idnexus.net

Wednesday, August 10, 2022

spam email for (866) 208-3445



Hi Prime Member;

Your Annual product subscription for 
NORTON Total All Round Security has been renewed AND updated successfully.

The charged amount will be available within the next 24 to 48 hrs on your profile of account.


_PRODUCT INFO_
INVOICE ID @     FJF10082022NO
Item Title @     NORTON Total All Round Security
START DATE @     10 Aug 2022


End Date @     One year from START DATE
Grand Total @     $262.23USD
Method Of Payment @     Debit from account

If you wish to not to continue and ask for a REFUND then please feel free to call our BILLING & SETTLEMENT DEPARTMENT as soon as possible!



You can Reach us on :  +1 – ( 866 ) – ( 208 ) – 3445

Monday, July 25, 2022

spam SMS from (760) 910-1651


Phishing attempt from site secu05-my-weiis dot com.

Domain Name: SECU05-MY-WEIIS.COM
Registry Domain ID: 2713495364_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2022-07-25T18:47:51Z

Friday, March 4, 2022

justicekelvin38@gmail.com

From: Dr Justicekelvin <justicekelvin38@gmail.com>
Date: Tue, 1 Mar 2022, 5:30 am
Subject: Good Day,
To:


Good Day,


Please Read very carefully. I am Dr. Justice Kelvin. I’m the credit
officer in a Bank here in Ouagadougou Burkina Faso. I have a business
proposal in the tune of US $ 12.5M (TWELVE MILLION FIVE HUNDRED THOUSAND
UNITED STATES DOLLARS) after the successful transfer; we shall share in a
ratio of 40% for you and 60% for me. I want to front you in the bank so
that you can apply for the claim of this fund as the next of kin to our
late customer who died years ago with his entire family while on holidays
and several attempts have been made to locate his family without success.

You should understand that as an insider in the bank I will do everything
possible to protect your interest and to make sure that I follow things up
as soon as you are willing to work this out with me because I will not want
this money to go into the government purse. Should you be interested,
please contact me so that we can commence on all arrangements and I Will
give you more information on how we would handle this project. Please treat
this business with utmost confidentiality and send me the Following
information:


(1Your )Full names: .........
(2)your  Private phone number.........
(3)Your  Current residential address:.....
(4)Occupation:...........
(5) Age ....................


Here is the website for more information about the owner of the fund’s death

  http://www.sptimes.com/2003/ 07/21/Worldandnation/12_
Americans_die_in_K.shtml


Thanks,
Dr. Justice  Kelvin.

sk@srfti.ac.in

From: Mrs. Reem Al-Hashimi <sk@srfti.ac.in>
Date: Fri, 4 Mar 2022, 1:56 am
Subject: Parfect Transaction
To: Recipients <sk@srfti.ac.in>


Hello Sir/Ma,

My name is Reem E. Al-Hashimi, the Emirates Minister of State and Managing Director of the United Arab Emirates (Dubai) World Expo 2020 Committee.I urgently need your assistance on ongoing Russia-ukraine War that affect my investment in Ukraine badly and I urgently need to move my funds out of Turkey bank immediately.

The amount is valued at Euro 47,745,533.00 with a financial institution in Turkey to be transferred to your account. As soon as I have your information indicating interest to receive and invest in the fund, I will compensate you with 30% of the total amount and you will also benefit from the investment.

If you can handle the fund in a good investment.PLEASE REPLY ME ON THIS EMAIL: hashimirrr22@kakao.com

Regards,
Mrs. Reem

efccbanchancchemergency000@gmail.com

From: Mr Ahmed Mohad Fasial <efccbanchancchemergency000@gmail.com>
Date: Fri, 4 Mar 2022, 11:55 am
Subject: CAN WE DO BUSINESS???
To:


I am  Mr Ahmed Mohad Fasial ,the Manager Finance and Account Qatar
Petroleum London liaison office   I have some  floating funds for Investment.

Contact me if you are interested, I have set up modalities and the
processes to transfer the
fund to any of your account designate as a Contract Fund to avoid
every query by the authority in your Country. I sent this message from
my private email; I will give you more details  upon the receipt of
your response to prove myself and office.


Regards,
Mr Ahmed Mohad Fasial
QATAR PETROLEUM LONDON LIASON OFFICE
Tel, 447452324501

(707) 687-0836

(805) 926-7339

(628) 900-1223

(380) 500-7538

(989) 856-3668

(909) 755-4885