Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Netflix <netflix@mail.com>

DO NOT click on any links in these emails.

Netflix <netflix@mail.com>

Unread postby SlapHappy » Mon Oct 17, 2016 7:18 pm

* 105.66.133.120 n/a Morocco

Return-Path: <jessica@web39.lws-hosting.com>
Received: from web39.lws-hosting.com (cp1.dnshostservices.com. [91.234.194.248])
by mx.google.com with ESMTPS id l18si166400wma.141.2016.10.14.13.37.49
for <xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 14 Oct 2016 13:37:50 -0700 (PDT)
Received-SPF: neutral (google.com: 91.234.194.248 is neither permitted nor denied
by best guess record for domain of jessica@web39.lws-hosting.com)
client-ip=91.234.194.248;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 91.234.194.248 is neither permitted nor denied by
best guess record for domain of jessica@web39.lws-hosting.com)
smtp.mailfrom=jessica@web39.lws-hosting.com
Received: from jessica by web39.lws-hosting.com with local (Exim 4.87)
(envelope-from <jessica@web39.lws-hosting.com>) id 1bv9Ej-001Mg6-OM for
xxx; Fri, 14 Oct 2016 22:37:49 +0200
To: xxx
Subject: Confirm your Payment Details !
X-PHP-Script: www.jessica-chastain.tk/sendoxa.php for 105.66.133.120
X-PHP-Originating-Script: 1427:sendoxa.php
MIME-Version: 1.0
Content-type: text/html; charset=utf-8
From: Netflix <netflix@mail.com>
Message-Id: <E1bv9Ej-001Mg6-OM@web39.lws-hosting.com>
Date: Fri, 14 Oct 2016 22:37:49 +0200
X-AntiAbuse: This header was added to track abuse, please include
it with any abuse report
X-AntiAbuse: Primary Hostname - web39.lws-hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1427 990] / [47 12]
X-AntiAbuse: Sender Address Domain - web39.lws-hosting.com
X-Get-Message-Sender-Via: web39.lws-hosting.com: authenticated_id:
jessica/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: web39.lws-hosting.com: jessica
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/
cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: jessica-chastain.tk:/public_html


Netflix Logo
Dear Netflix user,

Unfornutaly we have noticed that your payment details seems unverified and for that we need you to confirm your payment informations to continue enjoying your membership .

To update your informations please follow the link below :

Click Here http:/ /ow.ly/MTRe305cfiR

Sincerly

Netflix Support Team
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 13 guests