Restaurant reservation spam from Godaddy

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jun 2022 16:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o5EPN-000KJT-UG

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jun 2022 16:37:41 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jun 2022 16:37:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from p3nlsmtpcp01-01.prod.phx3.secureserver.net ([184.168.200.138]:53414)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o57Fu-000E6A-Km

for support@nk.ca;

Sat, 25 Jun 2022 08:59:30 -0600

Received: from ip-208-109-30-60.ip.secureserver.net ([10.199.64.97])

by : HOSTING RELAY : with ESMTP

id 57EVonBKS0laM57EVoNwKG; Sat, 25 Jun 2022 07:57:59 -0700

X-CMAE-Analysis: v=2.4 cv=Oc9dsjfY c=1 sm=1 tr=0 ts=62b72277

a=5p2kn+TdgGlJEV5v7/uc8g==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19

a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=fgDy8w7ttuYA:10 a=JPEYwPQDsx4A:10

a=9hr2dXKdsbcA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=e0_AuQ78AAAA:8 a=BLpdBwrKAAAA:8

a=apvkh1vuAAAA:8 a=7YTwq-ix-CRpEkE5m0YA:9 a=CjuIK1q_8ugA:10 a=ysFtJfyZtoYA:10

a=8kQ_f1rJiAEA:10 a=-FEs8UIgK8oA:10 a=VxAk22fqlfwA:10

a=vOzoP8Jct5zX5zm970cA:9 a=leIbZLNXLqNpi7-KbCw9:22 a=Fc17yzoUNXplVsMnFvaP:22

a=gh5n5Ha8Piztq4tLMmNn:22 a=cHgMXPtFmmav7kLHhf_m:22

X-SECURESERVER-ACCT: lo50cmsadmin

Received: from lo50cmsadmin by p3plvcpnl446268.prod.phx3.secureserver.net with local (Exim 4.94.2)

(envelope-from )

id 1o57EV-00E7hy-S6

for support@nk.ca; Sat, 25 Jun 2022 07:57:59 -0700

To: support@nk.ca

Subject: Thank you for your submission!

X-PHP-Script: outdoorrestaurantseating.com/index.php for 213.184.224.147

X-PHP-Filename: /home/lo50cmsadmin/public_html/outdoorrestaurantseating.com/index.php REMOTE_ADDR: 213.184.224.147

Date: Sat, 25 Jun 2022 14:57:59 +0000

From: Outdoor Restaurant Seating

Message-ID: <217da6cddb6e4f589f792ae562fbfd73@outdoorrestaurantseating.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_217da6cddb6e4f589f792ae562fbfd73"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - p3plvcpnl446268.prod.phx3.secureserver.net

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1259005 493] / [47 12]

X-AntiAbuse: Sender Address Domain - outdoorrestaurantseating.com

X-Get-Message-Sender-Via: p3plvcpnl446268.prod.phx3.secureserver.net: authenticated_id: lo50cmsadmin/from_h

X-Authenticated-Sender: p3plvcpnl446268.prod.phx3.secureserver.net: experts@outdoorrestaurantseating.com

X-Source:

X-Source-Args:

X-Source-Dir: lo50-cms.com:/public_html/outdoorrestaurantseating.com

X-CMAE-Envelope: MS4xfHm5sMvbylDndqaZtDRq/1CHtfxBhh61OF58B7qXkgjHhw7s+C3jeeeemyHBltRvxKhaSEu04j/xapbqGMFdpp4RQPtdSpvSMKYzdjiHl3QoBCrH23ZJ

yKRAJ4TWE3wD7OmWKZASfeFC/FkAQb8usa6FLRidrusunUzpfZ9A3BYzPHj1CHEAbuK8vRHypdNrstEGj+WiwIBCq7UO1VksBTWdkxlClELF5YA3SAtBzf4W



This is a multi-part message in MIME format.



--b1_217da6cddb6e4f589f792ae562fbfd73

Content-Type: text/plain; charset=us-ascii





Thank you for contacting us. We will get back to you as soon as possible.



Your Name: trzthqskix



Your Email: support@nk.ca



Subject: Get not leaving at home currently

https://bear2.page.link/19K1





Message: Derive locating at home actually



https://bear0.page.link/yuwr







: Send





--b1_217da6cddb6e4f589f792ae562fbfd73

Content-Type: text/html; charset=us-ascii



Thank you for contacting us. We will get back to you as soon as possible.



Your Name: trzthqskix



Your Email: support@nk.ca



Subject: Get not leaving at home currently

https://bear2.page.link/19K1



Message: Derive locating at home actually


https://bear0.page.link/yuwr




: Send









--b1_217da6cddb6e4f589f792ae562fbfd73--