2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

[#UEA-140-83969]: Thank you for your email, your reference number is 02638490

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1314
Joined: 2025-4-22 17:52

Post by emailbot » 2026-4-16 16:06

Heavens Support via arfe <zertrd@13083977115.com> wrote:
2026-4-16 16:06
Email subject: [#UEA-140-83969]: Thank you for your email, your reference number is 02638490
Reply-to: support@nebogame.online

UK Customer Care, здравствуйте!

Спасибо, что обратились к нам. Это
автоматическое сообщение было
отправлено для подтверждения того,
что мы получили Ваш запрос. Один из
наших сотрудников свяжется с Вами в
ближайшее время. В этом письме Вы
сможете найти детали запроса, которые
Вы отправили. В случае, если Вы
захотите написать нам ответ,
пожалуйста, сохраняйте в теме письма
номер (ID) Вашего запроса.

   НОМЕР ЗАПРОСА (ID): UEA-140-83969
   ТЕМА: Thank you for your email, your reference number is
02638490

Служба поддержки проекта Небеса.

Code: Select all

Return-Path: <x2+bncBC66HJWS5MHRBD4PQTHQMGQEKZGMP4Y@13083977115.com>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx209.dreamhost.com
Received: from mail-wr1-f70.google.com (mail-wr1-f70.google.com [209.85.221.70])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx209.dreamhost.com (Postfix) with ESMTPS id 4fxNDj1ZCwz5cFF
	for <contact@webseodesigners.com>; Thu, 16 Apr 2026 09:06:45 -0700 (PDT)
Received: by mail-wr1-f70.google.com with SMTP id ffacd0b85a97d-43cf5b4dac8sf8911859f8f.0
        for <contact@webseodesigners.com>; Thu, 16 Apr 2026 09:06:45 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1776355604; cv=pass;
        d=google.com; s=arc-20240605;
        b=WK0Gz9XqGESRFLCPgVKxtfEuREWI3Q3+EYyjAtejaCh00zcAudmyzQ/WARsSicgXw8
         0foUyFFNIXO14su2sGPqUX5k7oG+JDEMmCozaxFawsah1BQr4KGJDtI6qfWID9zHGElI
         VjqLAt/Bf4A2yJG54nZhlI7N49Q88l238Dy8Ppz+tx2uimyPv0OOjmYRmZv2gncoXpR5
         RzigY7c454z/EZ6VAuMT3QTzBALHcriDZec8sWBo49MONt0w+xLo+/zqtUui9ADwsPoZ
         DP/wgojUQ56V+hYg+GvtIs1M8oLywUDHQzvwTpHm/1oo4xiGca4F1qYd33DcMnuMoJ2N
         H5VQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:content-transfer-encoding
         :mime-version:cc:to:reply-to:from:subject:date:message-id
         :dkim-signature;
        bh=ib4hr0nUgm8d+AZHYHpKDdQDzyuhzAGN4bKaRTTQe1s=;
        fh=EDtMCY4BSf6g2HbUa7L6/if9annLaEo0HzR5GLmEC5o=;
        b=Z5lig8F8V19MOzWwYeUTiuji9DWMM2S6ucAz+3JyQvVCqvCuCY1F5Mk/fW2qOYnMjJ
         86KXpPb6CdFbR2oPcjhY6/OIRltcG7WVdSlJDPebf82ZmPO5a8Zh0DZdfutzyUqhVvar
         XDidaVU3zxoJVVpkgr8lFDyQjKUA3XhKDAm65bLTw9hjgEhHhRztJrcn+GKMZqtc4M4x
         sWCxCI6nnBOptZ/2bJ0vSyqdU5rnxoIQ9v1RDJ7uLaNAzQvhgPhYbMLVRxJqaQE0eULw
         tOjMqTuTQF6RZxzPbHeiMU9LHftfK2D7FAQgTryDgX+/P1CsZPcTJ9CEmWp6a8fcl/Q8
         X9mw==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@nebogame.online header.s=default header.b="mSrd6u/B";
       spf=pass (google.com: domain of support@nebogame.online designates 195.201.141.28 as permitted sender) smtp.mailfrom=support@nebogame.online;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=nebogame.online
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=13083977115.com; s=google; t=1776355604; x=1776960404; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:content-transfer-encoding:mime-version:cc:to
         :reply-to:from:subject:date:message-id:from:to:cc:subject:date
         :message-id:reply-to;
        bh=ib4hr0nUgm8d+AZHYHpKDdQDzyuhzAGN4bKaRTTQe1s=;
        b=TYpQsxuSXXFlFodk2h5nezv1j3hjdiW6VmhqEf2NuPWcCmFxHKhRSZYL15haPo0Sqd
         L/tdytoBy0rnzc4277LM5RjiPWWa5PhEUdz0yMvwf0fG/t3bI614R0CxY+fRXJnpm78p
         0TvZDrHrSe66dVHmG2Qeut8AhbLk1Wu2J3tdc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1776355604; x=1776960404;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender
         :content-transfer-encoding:mime-version:cc:to:reply-to:from:subject
         :date:message-id:x-beenthere:x-beenthere:x-gm-message-state:from:to
         :cc:subject:date:message-id:reply-to;
        bh=ib4hr0nUgm8d+AZHYHpKDdQDzyuhzAGN4bKaRTTQe1s=;
        b=Xv2k08iH3rHLyy8gfm5lzsMzBOLgcQ0GeQ20t5ehnvs44Txd/kLgeQcg9KU+DkZepZ
         M44F1DzsGxsi8atWGK1mkFlxKmlhIRum6qZ4qEfL+fNKq69H6Omv5GKHkLEI0CMlZcHt
         CSl1Bbd/T13uBZRMs5rmdcEk/wP8aNVBvy7gLJyJCRwqUaDogKNQe7qgdReDy0hOlScp
         DM7KXkKFRTPsBwKN09GnTZEuN+qroKLI3lbvPaEtPBepuw2azFbNMBKWi8aNj7+gPOFq
         pAFwG+jYS8X7Au1F0nX/+fR4KWgvSzQYxXUk1H2+Meu301XVGkDMd3fCmR/3CXZi+gR1
         6jYQ==
X-Forwarded-Encrypted: i=2; AFNElJ+x+vfIZ+NXBHXLJuq4FLFph033v3tf833iKDl5pJUUPXcItOwi40rx/6LlYGGskv4rq//1aYtb@webseodesigners.com
X-Gm-Message-State: AOJu0YzTyWC2zpl3kAMklSVWqJibCtRHfkzu2sIcJtlvjeFNK9PD5qnl
	/Mhy0GElguQxnFguN7Ge8ZyCw2o6+3RlekX3wu67kWVMRzrKYUuRtk3udiC0HxK2HNR2+FVhkgQ
	=
X-Received: by 2002:a05:6000:1a86:b0:43b:3d4f:e17a with SMTP id ffacd0b85a97d-43fe081b170mr51058f8f.37.1776355602016;
        Thu, 16 Apr 2026 09:06:42 -0700 (PDT)
X-BeenThere: x2@13083977115.com; h="AYAyTiLlBG5WSYK+hXmn+Ugq7h2XS6M2+vDJTIigwaeMwOWB1A=="
Received: by 2002:a05:6000:2991:10b0:43d:326f:fc3c with SMTP id
 ffacd0b85a97d-43eb1c5c0cbls640613f8f.1.-pod-prod-02-eu; Thu, 16 Apr 2026
 09:00:15 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AFNElJ+lZUGR2czq8RH3qNK0y2ZXwy61X+0e9AMWYXBx1ZPAWFx5HZZ8lcpaNiO4qZS874jWQw==@13083977115.com
X-Received: by 2002:a5d:5d88:0:b0:43b:5097:6f62 with SMTP id ffacd0b85a97d-43fe0818db3mr34328f8f.36.1776355209844;
        Thu, 16 Apr 2026 09:00:09 -0700 (PDT)
X-BeenThere: zertrd@13083977115.com; h="AYAyTiIfTjopGBtGw0kS0q2/BQ5sPufD5V/cn8iLjvXEYtBa5A=="
Received: by 2002:a05:6000:2991:10b0:43d:326f:fc3c with SMTP id
 ffacd0b85a97d-43eb1c5c0cbls640467f8f.1.-pod-prod-02-eu; Thu, 16 Apr 2026
 09:00:08 -0700 (PDT)
X-Received: by 2002:a5d:64e8:0:b0:43d:1c21:ead5 with SMTP id ffacd0b85a97d-43fe0808cefmr14972f8f.22.1776355207830;
        Thu, 16 Apr 2026 09:00:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1776355207; cv=none;
        d=google.com; s=arc-20240605;
        b=DBqaRkbyCQt2UCdQTKBDhGrEwVK2C39XBBaEO2cB80rz3Dx6hOdYl/cR75RgBDqcPy
         av9wUidMGzcUk6KLea5iqhn0RlHLRqKqpIyRKkvfojmICm650FKZVCNVjHd+k3CTWcN6
         ZRAYN9dbcD3ZbLtCimJe/ZJR6BpRszNSPlROkwfIjm2FsUY/EPjH/ZRtX+LMEVtqMKD/
         vM0ougvIsGxiaKRvmugHyHewrjq1/Mjtt9KJrsR0UJbm3UGBLiQaC2XClR60z/C5Dyne
         0IbtMkextkRu7hk5hE4TF6yWyVgLXfayXcLA0a2mJ453SOUMMJPrAfesmRvFcvPRyqDE
         hUVg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=content-transfer-encoding:mime-version:cc:to:reply-to:from:subject
         :date:message-id:dkim-signature;
        bh=ib4hr0nUgm8d+AZHYHpKDdQDzyuhzAGN4bKaRTTQe1s=;
        fh=HC0n/TXZUB4qGaElz5aYnjFYJziAT+tFS92hpRW+1uY=;
        b=dmt56sdqiPXt5QQf8I6zpYzzxhku6TFioJ3072mdLGuBMFA7zUZctHmkx6hqzaLQgk
         +d4y5+rDsM1RwI0rXX2hLWiW55n0tNx/OnI8MVEIpk6K5uj7pGUpPzol7tKRMa1F+TTO
         MAdkGM/qhknZepdyZ51ywT7YW3WB8hfKNpwI4ewevHaihV+6RXjcMXZ2xYs1T/epAVjH
         86sgXh/6VW0JVHPlDXKubJ1X0CvQHQouyEoaAtnUigzeZhw0AJ8+8NIWZObPACbzAv3z
         W2PakzsH7D4wCx307sWswgAY5tduXeETBJ9Rurf+rV6W8uTq/alokb48po5dvqtzlU2T
         lCZQ==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@nebogame.online header.s=default header.b="mSrd6u/B";
       spf=pass (google.com: domain of support@nebogame.online designates 195.201.141.28 as permitted sender) smtp.mailfrom=support@nebogame.online;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=nebogame.online
Received: from mail.ocplay.net (mail.ocplay.net. [195.201.141.28])
        by mx.google.com with ESMTPS id ffacd0b85a97d-43ead3e40e0si8888951f8f.238.2026.04.16.09.00.07
        for <zertrd@13083977115.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Thu, 16 Apr 2026 09:00:07 -0700 (PDT)
Received-SPF: pass (google.com: domain of support@nebogame.online designates 195.201.141.28 as permitted sender) client-ip=195.201.141.28;
Received: from [176.9.45.123] (helo=support.nebogame.com)
	by mail.ocplay.net with esmtp (Exim 4.92)
	(envelope-from <support@nebogame.online>)
	id 1wDP8R-0004M3-LX
	for zertrd@13083977115.com; Thu, 16 Apr 2026 19:00:07 +0300
Message-ID: <1776355207.69e107879865a@support.nebogame.com>
Date: Thu, 16 Apr 2026 19:00:07 +0300
Subject: [#UEA-140-83969]: Thank you for your email, your reference number is
 02638490
From: "'Heavens Support' via arfe" <zertrd@13083977115.com>
Reply-To: support@nebogame.online
To: uk.customercare@prodrivenbrands.com
Cc: zertrd@13083977115.com
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
X-Original-Sender: support@nebogame.online
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@nebogame.online header.s=default header.b="mSrd6u/B";
       spf=pass (google.com: domain of support@nebogame.online designates
 195.201.141.28 as permitted sender) smtp.mailfrom=support@nebogame.online;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=nebogame.online
X-Original-From: Heavens Support <support@nebogame.online>
Precedence: list
Mailing-list: list X2@13083977115.com; contact X2+owners@13083977115.com
List-ID: <X2.13083977115.com>
X-Spam-Checked-In-Group: zertrd@13083977115.com
X-Google-Group-Id: 937436636112
List-Post: <https://groups.google.com/a/13083977115.com/group/X2/post>, <mailto:X2@13083977115.com>
List-Help: <https://support.google.com/a/13083977115.com/bin/topic.py?topic=25838>,
 <mailto:X2+help@13083977115.com>
List-Archive: <https://groups.google.com/a/13083977115.com/group/X2/>
List-Subscribe: <https://groups.google.com/a/13083977115.com/group/zertrd/subscribe>,
 <mailto:zertrd+subscribe@13083977115.com>
List-Unsubscribe: <mailto:googlegroups-manage+937436636112+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/13083977115.com/group/X2/subscribe>

<font face=3D"Candara, Verdana, Arial, Helvetica" size=3D"3">UK Customer=
 Care, =D0=B7=D0=B4=D1=80=D0=B0=D0=B2=D1=81=D1=82=D0=B2=D1=83=
=D0=B9=D1=82=D0=B5!<br />
<br />
=D0=A1=D0=BF=
=D0=B0=D1=81=D0=B8=D0=B1=D0=BE, =D1=87=D1=82=D0=BE =D0=BE=
=D0=B1=D1=80=D0=B0=D1=82=D0=B8=D0=BB=D0=B8=D1=81=D1=8C =D0=BA =
=D0=BD=D0=B0=D0=BC. =D0=AD=D1=82=D0=BE =D0=B0=D0=B2=D1=82=
=D0=BE=D0=BC=D0=B0=D1=82=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=BE=D0=B5 =
=D1=81=D0=BE=D0=BE=D0=B1=D1=89=D0=B5=D0=BD=D0=B8=D0=B5 =D0=B1=D1=8B=
=D0=BB=D0=BE =D0=BE=D1=82=D0=BF=D1=80=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=
=D0=BE =D0=B4=D0=BB=D1=8F =D0=BF=D0=BE=D0=B4=D1=82=D0=B2=D0=B5=
=D1=80=D0=B6=D0=B4=D0=B5=D0=BD=D0=B8=D1=8F =D1=82=D0=BE=D0=B3=D0=BE=
, =D1=87=D1=82=D0=BE =D0=BC=D1=8B =D0=BF=D0=BE=D0=BB=
=D1=83=D1=87=D0=B8=D0=BB=D0=B8 =D0=92=D0=B0=D1=88 =D0=B7=D0=B0=
=D0=BF=D1=80=D0=BE=D1=81. =D0=9E=D0=B4=D0=B8=D0=BD =D0=B8=
=D0=B7 =D0=BD=D0=B0=D1=88=D0=B8=D1=85 =D1=81=D0=BE=D1=82=D1=80=
=D1=83=D0=B4=D0=BD=D0=B8=D0=BA=D0=BE=D0=B2 =D1=81=D0=B2=D1=8F=D0=B6=
=D0=B5=D1=82=D1=81=D1=8F =D1=81 =D0=92=D0=B0=D0=BC=D0=B8 =
=D0=B2 =D0=B1=D0=BB=D0=B8=D0=B6=D0=B0=D0=B9=D1=88=D0=B5=D0=B5 =
=D0=B2=D1=80=D0=B5=D0=BC=D1=8F. =D0=92 =D1=8D=D1=82=D0=BE=
=D0=BC =D0=BF=D0=B8=D1=81=D1=8C=D0=BC=D0=B5 =D0=92=D1=8B =
=D1=81=D0=BC=D0=BE=D0=B6=D0=B5=D1=82=D0=B5 =D0=BD=D0=B0=D0=B9=D1=82=
=D0=B8 =D0=B4=D0=B5=D1=82=D0=B0=D0=BB=D0=B8 =D0=B7=D0=B0=D0=BF=
=D1=80=D0=BE=D1=81=D0=B0, =D0=BA=D0=BE=D1=82=D0=BE=D1=80=D1=8B=
=D0=B5 =D0=92=D1=8B =D0=BE=D1=82=D0=BF=D1=80=D0=B0=D0=B2=D0=B8=
=D0=BB=D0=B8. =D0=92 =D1=81=D0=BB=D1=83=D1=87=D0=B0=D0=B5, =D0=B5=D1=81=
=D0=BB=D0=B8 =D0=92=D1=8B =D0=B7=D0=B0=D1=85=D0=BE=D1=82=D0=B8=
=D1=82=D0=B5 =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D1=82=D1=8C =
=D0=BD=D0=B0=D0=BC =D0=BE=D1=82=D0=B2=D0=B5=D1=82, =D0=BF=
=D0=BE=D0=B6=D0=B0=D0=BB=D1=83=D0=B9=D1=81=D1=82=D0=B0, =D1=81=
=D0=BE=D1=85=D1=80=D0=B0=D0=BD=D1=8F=D0=B9=D1=82=D0=B5 =D0=B2 =
=D1=82=D0=B5=D0=BC=D0=B5 =D0=BF=D0=B8=D1=81=D1=8C=D0=BC=D0=B0 =
=D0=BD=D0=BE=D0=BC=D0=B5=D1=80 (ID) =D0=92=D0=B0=D1=88=D0=B5=D0=B3=
=D0=BE =D0=B7=D0=B0=D0=BF=D1=80=D0=BE=D1=81=D0=B0.<br />
<br />
&=
nbsp;&nbsp;&nbsp;<b>=D0=9D=D0=BE=D0=BC=D0=B5=D1=80 =D0=B7=D0=B0=
=D0=BF=D1=80=D0=BE=D1=81=D0=B0 (ID): </b>UEA-140-83969<br />
&nbsp;&nb=
sp;&nbsp;<b>=D0=A2=D0=B5=D0=BC=D0=B0: </b>Thank you for your email, your=
 reference number is 02638490<br />
<br />
=D0=A1=D0=BB=
=D1=83=D0=B6=D0=B1=D0=B0 =D0=BF=D0=BE=D0=B4=D0=B4=D0=B5=D1=80=D0=B6=
=D0=BA=D0=B8 =D0=BF=D1=80=D0=BE=D0=B5=D0=BA=D1=82=D0=B0 =D0=9D=
=D0=B5=D0=B1=D0=B5=D1=81=D0=B0.<br />
<br />
<br />
</font>


Top

Return to “Phishing, scam and spam emails”