Netflix phish from the UK
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Jul 2023 12:56:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qNeFE-000GdP-2h
for dave@doctor.nl2k.ab.ca;
Sun, 23 Jul 2023 12:55:52 -0600
Resent-From: The Doctor
Resent-Date: Sun, 23 Jul 2023 12:55:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server20.london-design.co.uk ([77.68.7.243]:35310)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qNcOr-000Epy-0d
for root@nl2k.ca;
Sun, 23 Jul 2023 10:57:45 -0600
Received: from arkamynikan9 by server20.london-design.co.uk with local (Exim 4.96)
(envelope-from)
id 1qNcMp-000QZK-08
for root@nl2k.ca;
Sun, 23 Jul 2023 16:55:35 +0000
To: root@nl2k.ca
Subject: =?UTF-8?B?0YPQvnVyINCw0YHRgdC+dW50INGW0ZUg0ZV00ZZsbCDRgNC1bmTRlm5nLg==?=
X-PHP-Script: arka.mynikan9.ir/wp-content/plugins/gyrqzxy/EhAJQlP/orvxmailer.php for 197.244.49.80
X-PHP-Originating-Script: 1033:orvxmailer.php
Date: Sun, 23 Jul 2023 16:55:34 +0000
From: Netflix
Message-ID: <07ad52d31853a825ab279e523e6f7d9e@arka.mynikan9.ir>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_07ad52d31853a825ab279e523e6f7d9e"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server20.london-design.co.uk
X-AntiAbuse: Original Domain - nl2k.ca
X-AntiAbuse: Originator/Caller UID/GID - [1033 992] / [47 12]
X-AntiAbuse: Sender Address Domain - mynikan9.ir
X-Get-Message-Sender-Via: server20.london-design.co.uk: authenticated_id: arkamynikan9/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: server20.london-design.co.uk: arkamynikan9
X-Source:
X-Source-Args: php-fpm: pool arka_mynikan9_ir
X-Source-Dir: arka.mynikan9.ir:/public_html/wp-content/plugins/gyrqzxy/EhAJQlP
X-Antivirus: AVG (VPS 230723-4, 7/23/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
--b1_07ad52d31853a825ab279e523e6f7d9e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Â
                         NETFLIX                          Â
Â
We're sad to see you go
Â
We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires. Please sign in to restart your current subscription.
Â
My Account
Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â
--b1_07ad52d31853a825ab279e523e6f7d9e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
--b1_07ad52d31853a825ab279e523e6f7d9e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Jul 2023 12:56:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qNeFE-000GdP-2h
for dave@doctor.nl2k.ab.ca;
Sun, 23 Jul 2023 12:55:52 -0600
Resent-From: The Doctor
Resent-Date: Sun, 23 Jul 2023 12:55:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server20.london-design.co.uk ([77.68.7.243]:35310)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qNcOr-000Epy-0d
for root@nl2k.ca;
Sun, 23 Jul 2023 10:57:45 -0600
Received: from arkamynikan9 by server20.london-design.co.uk with local (Exim 4.96)
(envelope-from
id 1qNcMp-000QZK-08
for root@nl2k.ca;
Sun, 23 Jul 2023 16:55:35 +0000
To: root@nl2k.ca
Subject: =?UTF-8?B?0YPQvnVyINCw0YHRgdC+dW50INGW0ZUg0ZV00ZZsbCDRgNC1bmTRlm5nLg==?=
X-PHP-Script: arka.mynikan9.ir/wp-content/plugins/gyrqzxy/EhAJQlP/orvxmailer.php for 197.244.49.80
X-PHP-Originating-Script: 1033:orvxmailer.php
Date: Sun, 23 Jul 2023 16:55:34 +0000
From: Netflix
Message-ID: <07ad52d31853a825ab279e523e6f7d9e@arka.mynikan9.ir>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_07ad52d31853a825ab279e523e6f7d9e"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server20.london-design.co.uk
X-AntiAbuse: Original Domain - nl2k.ca
X-AntiAbuse: Originator/Caller UID/GID - [1033 992] / [47 12]
X-AntiAbuse: Sender Address Domain - mynikan9.ir
X-Get-Message-Sender-Via: server20.london-design.co.uk: authenticated_id: arkamynikan9/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: server20.london-design.co.uk: arkamynikan9
X-Source:
X-Source-Args: php-fpm: pool arka_mynikan9_ir
X-Source-Dir: arka.mynikan9.ir:/public_html/wp-content/plugins/gyrqzxy/EhAJQlP
X-Antivirus: AVG (VPS 230723-4, 7/23/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
--b1_07ad52d31853a825ab279e523e6f7d9e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Â
                         NETFLIX                          Â
Â
We're sad to see you go
Â
We could not authorize your payment of $17.99 for the next billing cycle of your subscription therefore we've suspended your membership. But your current subscription is active until it expires. Please sign in to restart your current subscription.
Â
My Account
Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349Â
--b1_07ad52d31853a825ab279e523e6f7d9e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
                         NETFLIX                          Â
Our system is committed to preventing the transmission of fraudulent e-mails. Messages from us will not contain your first and last name. Copyright © 1999-2023 NF. All rights reserved. (Europe) S.à rl et Cie, SCA Société en Commandite par Actions. Official Location: 22-24 Boulevard Royal, L-2449 Luxembourg RCS Luxembourg B 118 349 |
--b1_07ad52d31853a825ab279e523e6f7d9e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments