Monday, September 13, 2021

Fwd: Fraud emails Fwd: Your Amazon.com order has been cancelled.



---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Sunday, September 12, 2021
Subject: Fraud emails Fwd: Your Amazon.com order has been cancelled.
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, abuse@web.com, abuse@networksolutions.com, toastbymaria@yahoo.com, noc@confluence-networks.com, abuse@confluence-networks.com, stephen.nuthall@broadcom.com, domains.admin@broadcom.com, abuse@messagelabs.com, dns-admin-alias@broadcom.com, domainabuse@cscglobal.com, arin@fusionconnect.com



I did not order anything 


Domain: persomomtme3@CHRISPRESTONTOW.COM 

Hosting Provider: Confluence Networks 

Nameservers: ns85.worldnic.co ns86.worldnic.com


Your Amazon.com order has been cancelled.

X-Ms-Tnef-Correlator: 
X-Starscan-Version: 9.81.4; banners=-,-,-
X-Ymailisg: NRCVWjIWLDuY5vvPcHYc2cNqFw38iN2GJHCAL9dhZPKlMkta JVdOVjkGLDA1R8f.S2HD2ES5MwufihAH81BysQS6AtNP3.TXMiVqCVc3fog6 VzfvRNU4KYL9uOrdPI9SL9HVOKrMOP.Ai.uSsNDS_mcaVtX9xKzHlTxR_v.K 2GOQHp.bidCc1JUC8jEyKD35PgcEdMrKZdIerkwlM_Q0mpvlfOsBoIVyz6fF yarlo4YcedtLzu_S9_XZ5NeuAPN3zVo7hE2sxUsdiZaKA.7yT87H17kMWppK s5_slGs08aqf7QwGGXoabJYLM7hXfzBpCkgQg7_A49gxprAxQQh_SU1gZMvM 3BkoWZqUP.ynC0ZbgEhFv6Z4_G7.81dZVQmL2lfQ1dCPadE9Mf9s8Jk62b72 oYEZUo8t6Qg1.nGEhSP70yeGIZ2w8n8YhdWYpDeobFOHvVHBeKIUn9soHqP. FwddLLzhcSu7rQMf5qGmsydj7P9Tg4IlNOE2vM2WeAxBBSuGdhbl73kiPTVN UtMPMT.GWHBy3FQFtncxT1jzZK2rleZ1jez_qAlbi50UX17WXJy.XASpnjyZ _x3I.d.cCB81D1.rKD1RNlFc1tGSHPq.w0d7neJZsdagx0N.gS9YE1fZziYx 6CtdXaVeg3ylVSt9kcI04CjU0BxWjLBwwQ8CPQ.B.Nt1AfaZhlG2NaVXHTSA qRVJ7ShRa6bxQJvqPedUh.rybGpONTbDLRH_.GCT84XCz1yXA6iprO3XFP0B HkPwOdEayHPpVZ3XY9ksSGVaCtT0YnBHUb5nzlYP8ajDylXvmJ4pez_SEc2D hyBQYqPkMVTK_iKyHU0tR_3nJMDiTxEPXU8GivY4XQNwicab3iPlniXurMHn YxopoRXrFXDB53k.lmDlVVmvw_mv.DLYVh9oKwUlKQLb3XJ082hYxkIspF85 l5DFeXoKnQ1I8m8u3p2wSrUdEuqNgWNvpF8j0XgMMumn2j9bW3XcxQ_r3.ze 4MvfXvPALEXAiSxr0oeYyeD06ui2FtDZRRzGX4_WbrIkI3i2wH2KCZ6roWi1 4CTpp3F65h3ucZTK28nbxRfpoCqQe2zik8uvZ1JCW6uYbLtyYwUUevyahVxf MfnA4hun2kk3iUnxw724lMxgIcmHM.CIoIKf.pcucjD_DGoJX.6HYt9DsrbO ZGC95T7PqGJ02qvUjnfaY3ofpoU0lL.zsdd4VCi4xifIGz_ALy6l8lkJWy_K nHD4Q8MadRLDNBSOEMGWtKlzypAUysHKta8C_Qqa7xP6hP.PHXA3oLk2YYqZ UBxvpswT.2PaCQ37LJbOanEhuFjl1dcFcnUv0gc1p0rQ0GR3ZcbT_HCB5Wai Ni54O7zKZd8rrlkAptMLjwHX4k_Eg6UAL869uN1PuYkiOprs15572Plb4SEn iDzROnzH0kSEkda52ja12D7BVDG5eSBzkWU7mhM9YHA1cCTx7s_yM7w9UF2t 7bJfDgYN9gF1Cxe6t7RxH5qfbPm35eK9nUm1yQt5.vUji9pdvk8u0R_7eR4v SuL_JIIjsc5FuzfNrL27jrVuYPqRBJIrVv0qJFVfRbK8tf8wiETlOlKcmICx 3OdCAB3L27jehYogubG7mxn4mdeIkln6YE8gWMZUirbrNQPunhDl4bzG3WjC p64zW6FoZG5Sb2Zs2oLJoprzNnV4gTaYjX68oMJSmZoudOo0P._XlqsePpUf xK_sFLVuKIyEOK8oHws1C342PituGe6Fsm78BKzIssVTIqUH1J2G61vavbMs libfVU1ZGvwGEIURUMEl.ZJZ30ZrCnZrc2fxH9annCUYEjNGUN1lZ2uK2m4I 4S1AL3z18cyK.H2ZjlZQNuYX_MsA6WwQdgl7qsrn7EpZD0a74JZ9_4xc_WlW My_ZQeLQNAJiMMkzYROu1ABNHvA46cQPZiEPQZpsZd4EEoUCT_9j3dGM8mmn FE6D.5t1yD0fCUwCm3s-
X-Starscan-Received: 
X-Originating-Ip: [67.219.250.112]
X-Originating-Ip: [199.119.192.66]
X-Originating-Ip: [102.89.3.190]
X-Apparently-To: ansvet_99@yahoo.com; Sun, 12 Sep 2021 11:30:28 +0000
X-Ms-Has-Attach: 
Mime-Version: 1.0
Thread-Index: AdenyXWXQqafzFJ9R3e1VClmYdtyTQ==
Authentication-Results: atlas222.free.mail.gq1.yahoo.com; dkim=unknown; spf=pass smtp.mailfrom=chrisprestontow.com; dmarc=unknown header.from=CHRISPRESTONTOW.COM;
Content-Length: 18473
X-Brightmail-Tracker: H4sIAAAAAAAAA1VTa0xTZxj26zmn58CoO9zsATdFiNlc1kJxjDc bbGY/FDVLdhU02VwZta0ppaFFcDpXcILCxLI1Fopc5H6Vm0ygogQFgZHJGGMqRS5FEBimchmD EbZTGh378+TJ+zzf8z4/3o/CXHpJT0oSp5FEK8UKb64jfie25T1B/Viw2K8m1Q1GFylI1t/kQ mKPFDIHr2EwOXsXh+bxTTA9382BmWItB8xaKwk5S+0IarMtBFy4qgRdQgUGM5PfcmC2pIaE1n EzFy6NT3FgYqYNh7LqYgIu/jzPhRvL8VxY0I5x4XzCVRYqThPwa9EgDiuJCwhSMzoxWDVYEMx bEjkwp+3kQHp/FQesy59Dge4vBPVZj0kYyNTjMHa6GkH+/RYMMswLBJTrfsSgL+8WDuXdfJhv XiUgvpod6bO6uTBam8GFswk3CFi8YOs/fp2AXxZ7SBirforD5X8ekFAzM0fC8EQ+++LaAagcS sJhztKBg+FhPwYthaw4m+gD32V3YXD5zyIcngyUIrDUDiGYvWnm7prAQoZMpWRIo3GQDDEab3 E+wA4RcmV4VNwXhMxk/AFXlepQXHzHPi2qSEXJyJFyoWsQYz6jJZORA8WldzKTSw0cG3el/Zm U2ruYjbvRgUzV+STCzoVMT17HmgentzPWnCu4jfPoMMZonlzLQfQmZrGrYs2D0XzmwVjOGmdo mim4bs9kaHdm0rJK2LkXM1KXhtv9SqZtyIDZM52ZzowxXIc2GtdFGdfZjOtsRkSx8x1MVZOv3 bKN0aeMkHb+KnPmUha5fp6LyDIUGB4tl8o0kWK5QiDy8xOIRP4C0c4AQUCAUPyVIFwYoxbESt Qagb9QHKsWqo9HfqmIEColmlrEHm2EKimwAT2etgpbkQfF8XbnnaoPErtsDI+KOC4Tq2WHo2M UEnUreomivBneGUuw2MU5WiKVxB2RK9jTfyYzlJO3G290iJV5apU4Ui2X2qUuFErpJrPyMOqn h7ksPlnKZ/FpWQGLi2uYYLXh7axCFu+3suiCK6OUEk8+r9K2jbbFyWKUz5c9+2q96GVPVx7as GGDi5NKEh0p1/xfn0J8Cnm78r4ZZVOc5ErN805TbF0OW3ehK8hWVyP+T/LUcg6afNwdT2QvF8 wI9Rk+xkLR+5U5fXXc4aa9hvs7CvtyX//egy/o0ONlKcGr7mdPbhcyBq+Dr5gat6Yebs/byx2 O0DX0WF94o993oagpKo26VxVq2uLqnJn05sl+/u79n3ile034n5OjA81FnV/XxdRJ1ffwD0vD QGQkHuVvGdlCS3YbStp8G7KyVe/uqds8TPh93L+yFPvH1u4X/dKw4tvbrqy+E6QrkfHbF0/tN z9SdJSfEJ2SrtyrkejOORwdmNarntaMHws9/rduxaPxt9FdjYENhR95Dhc7HNkXQ709KP3MaE rfldSU7+R7R+W8csxnc+/0W0fDuqYuWv0OBY///qnEG1fLxKLXsGi1+F+M8COR5QQAAA==
X-Viruschecked: Checked
Accept-Language: en-US
Thread-Topic: Your Amazon.com order has been cancelled.
X-Msg-Ref: server-22.tower-347.messagelabs.com!1631446193!125981!3
X-Symc-Ess-Client-Auth: outbound-route-from=fail
Content-Type: multipart/alternative; boundary="_000_4205ABA2556EC54E9752B1FA7755D43EF6D753AUSP01DAG0201coll_"
Received-Spf: pass (domain of chrisprestontow.com designates 67.219.250.112 as permitted sender)
Content-Language: en-US
Received: from 10.253.62.180 by atlas222.free.mail.gq1.yahoo.com with HTTPS; Sun, 12 Sep 2021 11:30:28 +0000
Received: from 67.219.250.112 (EHLO mail1.bemta24.messagelabs.com) by 10.253.62.180 with SMTPs (version=TLS1_2 cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256); Sun, 12 Sep 2021 11:30:28 +0000
Received: from [100.112.133.1] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-1.bemta.az-b.us-west-2.aws.symcld.net id 81/72-06027-7B4ED316; Sun, 12 Sep 2021 11:29:59 +0000
Received: (qmail 18204 invoked from network); 12 Sep 2021 11:29:57 -0000
Received: from out001.apptixemail.net (HELO out001.apptixemail.net) (199.119.192.66) by server-22.tower-347.messagelabs.com with ECDHE-RSA-AES256-SHA384 encrypted SMTP; 12 Sep 2021 11:29:57 -0000
Received: from AUSP01DAG0201.collaborationhost.net ([169.254.1.210]) by AUSP01MHUB11.collaborationhost.net ([::1]) with mapi id 14.03.0513.000; Sun, 12 Sep 2021 07:29:34 -0400

Record for ChrisPrestonTow.com 
RegistrantPreston, Chris 
Registrant Countryus 
RegistrarNetwork Solutions, LLC  
IANA ID: 2  
URL: http://networksolutions.com  
Whois Server: whois.networksolutions.com  
 
(p) 
Registrar StatusclientTransferProhibited 
DatesCreated on 2021-09-12
Expires on 2022-09-12
Updated on 2021-09-12
Name ServersNS85.WORLDNIC.COM (has 2,601,338 domains)
NS86.WORLDNIC.COM (has 2,601,338 domains)
Tech ContactPreston, Chris 
14 2ND ST
RUMSONNJ07760-1341us 
 
(p)
IP Address208.91.197.27 - 954,815 other sites hosted on this server 
IP LocationVirgin Islands, British - Virgin Islands, British - Road Town - Confluence Networks Inc
ASNVirgin Islands, British AS40034 CONFLUENCE-NETWORK-INC, VG (registered Apr 11, 2011)
Domain StatusNever Registered Before 
Website TitleNone given.
Terms14 (Unique: 14, Linked: 0)
Images0 (Alt tags missing: 0)
Links0   (Internal: 0, Outbound: 0)
Whois Record ( last updated on 20210912 )
Domain Name: CHRISPRESTONTOW.COM
Registry Domain ID: 
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2021-09-12T11:03:26Z
Creation Date: 2021-09-12T11:02:39Z
Registrar Registration Expiration Date: 2022-09-12T11:02:39Z
Registrar: Network Solutions, LLC
Registrar IANA ID: 2
Reseller: 
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: Preston, Chris
Registrant Organization: 
Registrant Street: 14 2ND ST
Registrant City: RUMSON
Registrant State/Province: NJ
Registrant Postal Code: 07760-1341
Registrant Country: US
Registrant Phone: 7326706372
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: 
Registry Admin ID: 
Admin Name: Preston, Chris
Admin Organization: 
Admin Street: 14 2ND ST
Admin City: RUMSON
Admin State/Province: NJ
Admin Postal Code: 07760-1341
Admin Country: US
Admin Phone: 7326706372
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: 
Registry Tech ID: 
Tech Name: Preston, Chris
Tech Organization: 
Tech Street: 14 2ND ST
Tech City: RUMSON
Tech State/Province: NJ
Tech Postal Code: 07760-1341
Tech Country: US
Tech Phone: 7326706372
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: 
Name Server: NS85.WORLDNIC.COM
Name Server: NS86.WORLDNIC.COM
DNSSEC: unsigned
Registrar Abuse Contact Email: 
Registrar Abuse Contact Phone: +1.8777228662
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2021-09-12T11:22:18Z <<<

For more information on Whois status codes, please visit 
https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en


Begin forwarded message:

Subject: Your Amazon.com order has been cancelled.
Date: September 12, 2021 at 7:29:33 AM EDT

​​​​
Amazon.comYour Orders  |  Your Account  |  Amazon.com

Order Cancelled

Order: #111-1715794-1641868
Hello .,

We're writing to let you know that your order has been cancelled because the payment couldn't be completed.You won't be charged for the cancelled item. 
​​
An issuing bank will often decline an attempt to charge a card if the name, expiry date, or post code you entered doesn't match the bank's information.

Before placing your next order, you can double-check your card details or add a new payment method here:

Order Details
  
Cancelled Order Details

Order: #111-1715794-1641868


Visit our Help pages for more information About Payment Methods and to learn how to Change Order Information

We hope to see you again soon.
Amazon.com



 







No comments:

Post a Comment