Netflix phish from the UK

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Jul 2023 12:56:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNeFE-000GdP-2h

for dave@doctor.nl2k.ab.ca;

Sun, 23 Jul 2023 12:55:52 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Jul 2023 12:55:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server20.london-design.co.uk ([77.68.7.243]:35310)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNcOr-000Epy-0d

for root@nl2k.ca;

Sun, 23 Jul 2023 10:57:45 -0600

Received: from arkamynikan9 by server20.london-design.co.uk with local (Exim 4.96)

(envelope-from )

id 1qNcMp-000QZK-08

for root@nl2k.ca;

Sun, 23 Jul 2023 16:55:35 +0000

To: root@nl2k.ca

Subject: =?UTF-8?B?0YPQvnVyINCw0YHRgdC+dW50INGW0ZUg0ZV00ZZsbCDRgNC1bmTRlm5nLg==?=

X-PHP-Script: arka.mynikan9.ir/wp-content/plugins/gyrqzxy/EhAJQlP/orvxmailer.php for 197.244.49.80

X-PHP-Originating-Script: 1033:orvxmailer.php

Date: Sun, 23 Jul 2023 16:55:34 +0000

From: Netflix

Message-ID: <07ad52d31853a825ab279e523e6f7d9e@arka.mynikan9.ir>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_07ad52d31853a825ab279e523e6f7d9e"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server20.london-design.co.uk

X-AntiAbuse: Original Domain - nl2k.ca

X-AntiAbuse: Originator/Caller UID/GID - [1033 992] / [47 12]

X-AntiAbuse: Sender Address Domain - mynikan9.ir

X-Get-Message-Sender-Via: server20.london-design.co.uk: authenticated_id: arkamynikan9/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: server20.london-design.co.uk: arkamynikan9

X-Source:

X-Source-Args: php-fpm: pool arka_mynikan9_ir

X-Source-Dir: arka.mynikan9.ir:/public_html/wp-content/plugins/gyrqzxy/EhAJQlP

X-Antivirus: AVG (VPS 230723-4, 7/23/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Â







                         NETFLIX                          Â







Â

















We're sad to see you go

Â





















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires. Please sign in to restart your current subscription.

Â









































My Account































Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â









--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

































                         NETFLIX                          Â













Â


















We're sad to see you go


Â






















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires.
Please sign in to restart your current subscription.


Â




























































My Account








Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name.

Copyright © 1999-2023 NF. All rights reserved.
(Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â








--b1_07ad52d31853a825ab279e523e6f7d9e--



Netflix phish from the UK

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Jul 2023 12:56:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNeFE-000GdP-2h

for dave@doctor.nl2k.ab.ca;

Sun, 23 Jul 2023 12:55:52 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Jul 2023 12:55:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server20.london-design.co.uk ([77.68.7.243]:35310)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNcOr-000Epy-0d

for root@nl2k.ca;

Sun, 23 Jul 2023 10:57:45 -0600

Received: from arkamynikan9 by server20.london-design.co.uk with local (Exim 4.96)

(envelope-from )

id 1qNcMp-000QZK-08

for root@nl2k.ca;

Sun, 23 Jul 2023 16:55:35 +0000

To: root@nl2k.ca

Subject: =?UTF-8?B?0YPQvnVyINCw0YHRgdC+dW50INGW0ZUg0ZV00ZZsbCDRgNC1bmTRlm5nLg==?=

X-PHP-Script: arka.mynikan9.ir/wp-content/plugins/gyrqzxy/EhAJQlP/orvxmailer.php for 197.244.49.80

X-PHP-Originating-Script: 1033:orvxmailer.php

Date: Sun, 23 Jul 2023 16:55:34 +0000

From: Netflix

Message-ID: <07ad52d31853a825ab279e523e6f7d9e@arka.mynikan9.ir>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_07ad52d31853a825ab279e523e6f7d9e"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server20.london-design.co.uk

X-AntiAbuse: Original Domain - nl2k.ca

X-AntiAbuse: Originator/Caller UID/GID - [1033 992] / [47 12]

X-AntiAbuse: Sender Address Domain - mynikan9.ir

X-Get-Message-Sender-Via: server20.london-design.co.uk: authenticated_id: arkamynikan9/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: server20.london-design.co.uk: arkamynikan9

X-Source:

X-Source-Args: php-fpm: pool arka_mynikan9_ir

X-Source-Dir: arka.mynikan9.ir:/public_html/wp-content/plugins/gyrqzxy/EhAJQlP

X-Antivirus: AVG (VPS 230723-4, 7/23/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Â







                         NETFLIX                          Â







Â

















We're sad to see you go

Â





















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires. Please sign in to restart your current subscription.

Â









































My Account































Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â









--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

































                         NETFLIX                          Â













Â


















We're sad to see you go


Â






















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires.
Please sign in to restart your current subscription.


Â




























































My Account








Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name.

Copyright © 1999-2023 NF. All rights reserved.
(Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â








--b1_07ad52d31853a825ab279e523e6f7d9e--



Netflix phish from the UK

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Jul 2023 12:56:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNeFE-000GdP-2h

for dave@doctor.nl2k.ab.ca;

Sun, 23 Jul 2023 12:55:52 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Jul 2023 12:55:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server20.london-design.co.uk ([77.68.7.243]:35310)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qNcOr-000Epy-0d

for root@nl2k.ca;

Sun, 23 Jul 2023 10:57:45 -0600

Received: from arkamynikan9 by server20.london-design.co.uk with local (Exim 4.96)

(envelope-from )

id 1qNcMp-000QZK-08

for root@nl2k.ca;

Sun, 23 Jul 2023 16:55:35 +0000

To: root@nl2k.ca

Subject: =?UTF-8?B?0YPQvnVyINCw0YHRgdC+dW50INGW0ZUg0ZV00ZZsbCDRgNC1bmTRlm5nLg==?=

X-PHP-Script: arka.mynikan9.ir/wp-content/plugins/gyrqzxy/EhAJQlP/orvxmailer.php for 197.244.49.80

X-PHP-Originating-Script: 1033:orvxmailer.php

Date: Sun, 23 Jul 2023 16:55:34 +0000

From: Netflix

Message-ID: <07ad52d31853a825ab279e523e6f7d9e@arka.mynikan9.ir>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_07ad52d31853a825ab279e523e6f7d9e"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server20.london-design.co.uk

X-AntiAbuse: Original Domain - nl2k.ca

X-AntiAbuse: Originator/Caller UID/GID - [1033 992] / [47 12]

X-AntiAbuse: Sender Address Domain - mynikan9.ir

X-Get-Message-Sender-Via: server20.london-design.co.uk: authenticated_id: arkamynikan9/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: server20.london-design.co.uk: arkamynikan9

X-Source:

X-Source-Args: php-fpm: pool arka_mynikan9_ir

X-Source-Dir: arka.mynikan9.ir:/public_html/wp-content/plugins/gyrqzxy/EhAJQlP

X-Antivirus: AVG (VPS 230723-4, 7/23/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Â







                         NETFLIX                          Â







Â

















We're sad to see you go

Â





















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires. Please sign in to restart your current subscription.

Â









































My Account































Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â









--b1_07ad52d31853a825ab279e523e6f7d9e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

































                         NETFLIX                          Â













Â


















We're sad to see you go


Â






















We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires.
Please sign in to restart your current subscription.


Â




























































My Account








Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name.

Copyright © 1999-2023 NF. All rights reserved.
(Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â








--b1_07ad52d31853a825ab279e523e6f7d9e--