openai phish from nxcli
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 19 May 2026 10:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPNJI-000000006Rz-1zpd
for dave@doctor.nl2k.ab.ca;
Tue, 19 May 2026 10:28:48 -0600
Resent-From: The Doctor
Resent-Date: Tue, 19 May 2026 10:28:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-3259332.us-midwest-1.nxcli.net ([209.87.149.210]:42624)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPMce-000000000CY-1shy
for root@nk.ca;
Tue, 19 May 2026 09:44:51 -0600
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=1be5a72acb.nxcli.io;
b=lmCtBQ75aFJy5JscKwO7/R8FbldlhCbcTzT688KDXzMhIHqGvrJVF9DJHM2hTv0uC2rb4LW1JY0xuyN3l+Gia/pA5THBhUralUekvbD/N3CYPAwXIrFEA5TTYekhy+NuCXfeFst/sf/+n67tBmAr73EaSjAr+RGL6pxJkvL0WmlVZrUbSqSsbJfWz5pCvfhLbLFlghnW0rRLIsxLt70r9DNnxdQFqQf26LbrJryqYz2+fc8cNxmK8Vi6vVRZwOXKG+6dNw3Kl+Vqc5pAIBuDtLnw5UgoYDr+hDBrJ+024BeNPFegVEqy6npKuO4PJBUoXIvdTqZhVz/r0mPSgsnfkw==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=1be5a72acb.nxcli.io; h=
date:message-id:to:subject:mime-version:content-type:from
:reply-to; s=default; bh=ngVRUmhoVVB4mXCvj1T4SzC5b80=; b=mE+s3GW
kU23LxdSpiCvP14az4Gs017GhSrAYwdwhKComxFJhXeAqvt979WoCFxbGntyN8RR
q75BUdViVJc+alHy6uF8T10IJrQpguDFlDwS9t45LpRIe80K8XkTgc44Ttz+E/tg
vwIjnSUz9VqQAV7s5p5OjNrnEe54OrPsg9P/vUxK7nlcaCRKricHrZR0gvv/2QLg
W3xoa+NMgpjVsYBGPv/ANWxnZknc8OtdlFfo3b4OEtmFjnjYaNUh7T8+vaWcltMU
5aq0BqT+Bv/JrMF+2L2eN3IXwCBHMOEu4/roQ/oAQaPv3hcOGGJk2WiDw5x/DJcm
Tn+T1IWNPj55v5A==
Received: (qmail 13183 invoked by uid 10239); 19 May 2026 15:39:42 +0000
Date: 19 May 2026 15:39:42 +0000
Message-ID: <20260519153942.13174.qmail@cloudhost-3259332.us-midwest-1.nxcli.net>
To: root@nk.ca
Subject: Action Required: Your ChatGPT Plus payment was declined
X-PHP-Originating-Script: 10239:info.php
MIME-Version: 1.0
Content-type: text/html; charset=UTF-8
From: OpenAI Support
Reply-To: support@1be5a72acb.nxcli.io
Subscription Declined
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 19 May 2026 10:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPNJI-000000006Rz-1zpd
for dave@doctor.nl2k.ab.ca;
Tue, 19 May 2026 10:28:48 -0600
Resent-From: The Doctor
Resent-Date: Tue, 19 May 2026 10:28:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-3259332.us-midwest-1.nxcli.net ([209.87.149.210]:42624)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPMce-000000000CY-1shy
for root@nk.ca;
Tue, 19 May 2026 09:44:51 -0600
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=1be5a72acb.nxcli.io;
b=lmCtBQ75aFJy5JscKwO7/R8FbldlhCbcTzT688KDXzMhIHqGvrJVF9DJHM2hTv0uC2rb4LW1JY0xuyN3l+Gia/pA5THBhUralUekvbD/N3CYPAwXIrFEA5TTYekhy+NuCXfeFst/sf/+n67tBmAr73EaSjAr+RGL6pxJkvL0WmlVZrUbSqSsbJfWz5pCvfhLbLFlghnW0rRLIsxLt70r9DNnxdQFqQf26LbrJryqYz2+fc8cNxmK8Vi6vVRZwOXKG+6dNw3Kl+Vqc5pAIBuDtLnw5UgoYDr+hDBrJ+024BeNPFegVEqy6npKuO4PJBUoXIvdTqZhVz/r0mPSgsnfkw==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=1be5a72acb.nxcli.io; h=
date:message-id:to:subject:mime-version:content-type:from
:reply-to; s=default; bh=ngVRUmhoVVB4mXCvj1T4SzC5b80=; b=mE+s3GW
kU23LxdSpiCvP14az4Gs017GhSrAYwdwhKComxFJhXeAqvt979WoCFxbGntyN8RR
q75BUdViVJc+alHy6uF8T10IJrQpguDFlDwS9t45LpRIe80K8XkTgc44Ttz+E/tg
vwIjnSUz9VqQAV7s5p5OjNrnEe54OrPsg9P/vUxK7nlcaCRKricHrZR0gvv/2QLg
W3xoa+NMgpjVsYBGPv/ANWxnZknc8OtdlFfo3b4OEtmFjnjYaNUh7T8+vaWcltMU
5aq0BqT+Bv/JrMF+2L2eN3IXwCBHMOEu4/roQ/oAQaPv3hcOGGJk2WiDw5x/DJcm
Tn+T1IWNPj55v5A==
Received: (qmail 13183 invoked by uid 10239); 19 May 2026 15:39:42 +0000
Date: 19 May 2026 15:39:42 +0000
Message-ID: <20260519153942.13174.qmail@cloudhost-3259332.us-midwest-1.nxcli.net>
To: root@nk.ca
Subject: Action Required: Your ChatGPT Plus payment was declined
X-PHP-Originating-Script: 10239:info.php
MIME-Version: 1.0
Content-type: text/html; charset=UTF-8
From: OpenAI Support
Reply-To: support@1be5a72acb.nxcli.io
Subscription Payment Declined
Hello,
We attempted to process your subscription payment for ChatGPT, but unfortunately, the payment was declined.
This may be due to an issue with your payment method. To continue enjoying uninterrupted access to ChatGPT Plus, please update your payment information.
If you have any questions or need help, feel free to contact our support team.
Thank you for using ChatGPT.
The OpenAI Team