Telus Phish from Godaddy servers
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 31 Aug 2023 10:06:43 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qbk3L-000Bct-1j
for dave@doctor.nl2k.ab.ca;
Thu, 31 Aug 2023 09:57:51 -0600
Resent-From: The Doctor
Resent-Date: Thu, 31 Aug 2023 09:57:51 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from sg2nlsmtp01.shr.prod.sin2.secureserver.net ([182.50.132.200]:39584)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qbj5A-000Ios-31
for sales@nk.ca;
Thu, 31 Aug 2023 08:55:48 -0600
Received: from 233.148.178.68.host.secureserver.net ([68.178.148.233])
by : HOSTING RELAY : with ESMTP
id bj24qgXgrQC9lbj24qKiEO; Thu, 31 Aug 2023 07:52:28 -0700
X-CMAE-Analysis: v=2.4 cv=RdFWSXhv c=1 sm=1 tr=0 ts=64f0a92d
a=jOfmBXDIgZ3f7RWJ7r0YaA==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19
a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jLT73KNRGXAA:10
a=UttIx32zK-AA:10 a=oz0Tc89kS62m_WjhOEcA:9 a=QEXdDO2ut3YA:10
a=kk-zCLGhz2LNTA5YLv3F:22 a=ovdgq_hFLMjbvb_0FUP8:22
X-SECURESERVER-ACCT: c72txf1nyol6
Received: from c72txf1nyol6 by bom1plzcpnl502768.prod.bom1.secureserver.net with local (Exim 4.95)
(envelope-from)
id 1qbj1v-002skE-Qh
for sales@nk.ca;
Thu, 31 Aug 2023 07:52:28 -0700
To: sales@nk.ca
Subject: Not Reachable? 17806692000 ?
X-PHP-Script: walmart.ind.in/sender.php for 49.37.249.223
X-PHP-Filename: /home/c72txf1nyol6/public_html/sender.php REMOTE_ADDR: 49.37.249.223
From: rajesh@letusbiz.com
Content-Type: text/plain; charset=UTF-8
Message-Id:
Date: Thu, 31 Aug 2023 07:52:19 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - bom1plzcpnl502768.prod.bom1.secureserver.net
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [9402249 484] / [47 12]
X-AntiAbuse: Sender Address Domain - bom1plzcpnl502768.prod.bom1.secureserver.net
X-Get-Message-Sender-Via: bom1plzcpnl502768.prod.bom1.secureserver.net: authenticated_id: c72txf1nyol6/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: bom1plzcpnl502768.prod.bom1.secureserver.net: c72txf1nyol6
X-Source:
X-Source-Args:
X-Source-Dir: walmart.ind.in:/public_html
X-CMAE-Envelope: MS4xfJU+iIqFgGiQ1MeWDpFzvktDSbYlZjbuyMzzPZWJUJQKOyJJJaLH4rIo9rOl3EsvSeaNaZ4zeylkzgTU5XbtsiOUkt/1wMtX2x15Jkgf/IyiSpPupfdJ
uu9fQ2cMjr0vvdnVytzczRpfg97hCrqEakTJ6k7d2QYObPFgX7joPgurifGKcpy2Pdf/DziCOjHIi5IQJqVB5jjsWCj98MApxgpQ8R8LCBf9TZclMwDxSA5t
5WQewRRL6Qd832bOzwhEXNI7vbr2edWfjxQYhvP39TI=
daveyadallee
Am I reaching the right Number?
Thank You
Rajesh
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 31 Aug 2023 10:06:43 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qbk3L-000Bct-1j
for dave@doctor.nl2k.ab.ca;
Thu, 31 Aug 2023 09:57:51 -0600
Resent-From: The Doctor
Resent-Date: Thu, 31 Aug 2023 09:57:51 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from sg2nlsmtp01.shr.prod.sin2.secureserver.net ([182.50.132.200]:39584)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qbj5A-000Ios-31
for sales@nk.ca;
Thu, 31 Aug 2023 08:55:48 -0600
Received: from 233.148.178.68.host.secureserver.net ([68.178.148.233])
by : HOSTING RELAY : with ESMTP
id bj24qgXgrQC9lbj24qKiEO; Thu, 31 Aug 2023 07:52:28 -0700
X-CMAE-Analysis: v=2.4 cv=RdFWSXhv c=1 sm=1 tr=0 ts=64f0a92d
a=jOfmBXDIgZ3f7RWJ7r0YaA==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19
a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jLT73KNRGXAA:10
a=UttIx32zK-AA:10 a=oz0Tc89kS62m_WjhOEcA:9 a=QEXdDO2ut3YA:10
a=kk-zCLGhz2LNTA5YLv3F:22 a=ovdgq_hFLMjbvb_0FUP8:22
X-SECURESERVER-ACCT: c72txf1nyol6
Received: from c72txf1nyol6 by bom1plzcpnl502768.prod.bom1.secureserver.net with local (Exim 4.95)
(envelope-from
id 1qbj1v-002skE-Qh
for sales@nk.ca;
Thu, 31 Aug 2023 07:52:28 -0700
To: sales@nk.ca
Subject: Not Reachable? 17806692000 ?
X-PHP-Script: walmart.ind.in/sender.php for 49.37.249.223
X-PHP-Filename: /home/c72txf1nyol6/public_html/sender.php REMOTE_ADDR: 49.37.249.223
From: rajesh@letusbiz.com
Content-Type: text/plain; charset=UTF-8
Message-Id:
Date: Thu, 31 Aug 2023 07:52:19 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - bom1plzcpnl502768.prod.bom1.secureserver.net
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [9402249 484] / [47 12]
X-AntiAbuse: Sender Address Domain - bom1plzcpnl502768.prod.bom1.secureserver.net
X-Get-Message-Sender-Via: bom1plzcpnl502768.prod.bom1.secureserver.net: authenticated_id: c72txf1nyol6/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: bom1plzcpnl502768.prod.bom1.secureserver.net: c72txf1nyol6
X-Source:
X-Source-Args:
X-Source-Dir: walmart.ind.in:/public_html
X-CMAE-Envelope: MS4xfJU+iIqFgGiQ1MeWDpFzvktDSbYlZjbuyMzzPZWJUJQKOyJJJaLH4rIo9rOl3EsvSeaNaZ4zeylkzgTU5XbtsiOUkt/1wMtX2x15Jkgf/IyiSpPupfdJ
uu9fQ2cMjr0vvdnVytzczRpfg97hCrqEakTJ6k7d2QYObPFgX7joPgurifGKcpy2Pdf/DziCOjHIi5IQJqVB5jjsWCj98MApxgpQ8R8LCBf9TZclMwDxSA5t
5WQewRRL6Qd832bOzwhEXNI7vbr2edWfjxQYhvP39TI=
daveyadallee
Am I reaching the right Number?
Thank You
Rajesh