Netflix Phish from Michigan

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Jun 2024 14:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sFgXQ-00000000Pda-2cmM

for dave@doctor.nl2k.ab.ca;

Fri, 07 Jun 2024 14:50:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 7 Jun 2024 14:50:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-11129428.us-midwest-2.nxcli.net ([199.189.225.135]:47770)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sFfIK-00000000EuU-0zDt

for sales@nk.ca;

Fri, 07 Jun 2024 13:30:41 -0600

Received: (qmail 17202 invoked by uid 10102); 7 Jun 2024 19:27:47 +0000

Date: Fri, 7 Jun 2024 19:27:07 +0000

To: sales@nk.ca

From: =?UTF-8?Q?N=D0=B5tflix?=

Reply-To: user@nt.com

Subject: Action Required: Prevent Account Hold

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="16f54ffd75b7bfc978d9e8c67ab4544e2"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: @media(max-width:500px){u+.body .content-shell-table,u+.body

.footer,u+.body .footer-shell-table,u+.body .inbox-fix{min-width:calc(100vw

- 8.5vw)!important}.ios-hide,.mobile-hide{display:none!importan [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[199.189.225.135 listed in dnsbl.ahbl.org]

[199.189.225.135 listed in dnsbl.ahbl.org]

[199.189.225.135 listed in dnsbl.ahbl.org]

[199.189.225.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[199.189.225.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[199.189.225.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[199.189.225.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[199.189.225.135 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fiscreditassetportal.ru.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: fiscreditassetportal.ru.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: fiscreditassetportal.ru.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

[199.189.225.135 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[199.189.225.135 listed in wl.mailspike.net]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_92 BODY: 9alpha-pock-2alpha

0.1 TW_FL BODY: Odd Letter Triples with FL

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 US_8BIT US-ASCII isn't an eight bit charset

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Action Required: Prevent Account Hold



This is a multi-part message in MIME format.



--16f54ffd75b7bfc978d9e8c67ab4544e2

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: quoted-printable



@media(max-width:500px){u+.body .content-shell-table,u+.body .footer,u+.bod=

y .footer-shell-table,u+.body .inbox-fix{min-width:calc(100vw - 8.5vw)!impo=

rtant}.ios-hide,.mobile-hide{display:none!important}.desktop-hide,.desktop-=

hide img{display:initial!important}table.desktop-hide{display:table!importa=

nt}.mobile-100w{width:100%!important}.mobile-block{display:block!important}=

.mobile-left{float:left!important}.mobile-right{float:right!important}.mobi=

le-center{margin:0 auto;text-align:center!important}.content-padding{paddin=

g-left:5.6%!important;padding-right:5.6%!important}.inner-padding{padding-l=

eft:6%!important;padding-right:6%!important}.outside-padding{padding-left:1=

1.199999809265137%!important;padding-right:11.199999809265137%!important}}@=

media screen and (-webkit-min-device-pixel-ratio:0) and (max-width:500px){.=

container.main-border{padding:0!important}.content-shell{border:none!import=

ant}}.hide,.hide a,.hide div,.hide img,.hide table,.hide td,.hide tr{displa=

y:none!important;width:0!important;height:0!important;max-height:0!importan=

t;line-height:0!important;mso-hide:all!important;overflow:hidden!important;=

visibility:hidden!important}.pixel img{overflow:hidden;position:fixed;visib=

ility:hidden!important;height:1px!important;width:1px!important;border:0!im=

portant;margin:0!important;padding:0!important}@media yahoo{table{border-co=

llapse:collapse;table-layout:fixed}table table{table-layout:auto}} [data-t=

erm]{border-bottom:none!important;pointer-events:none!important}.ii a{color=

:inherit!important;text-decoration:none!important}a[x-apple-data-detectors]=

{color:inherit!important;text-decoration:none!important;font-size:inherit!i=

mportant;font-family:inherit!important;font-weight:inherit!important;line-h=

eight:inherit!important}table{-wings-cellpadding:0;-wings-cellspacing:0;-wi=

ngs-border:0;border-spacing:0}img{-ms-interpolation-mode:bicubic;border:0;o=

utline:0;border-collapse:collapse}.empty{font-size:0;line-height:0}.desktop=

-hide,.desktop-hide img,.desktop-hide-max,.desktop-hide-max img{display:non=

e;mso-hide:all}.content-padding{padding-left:40px;padding-right:40px}.inner=

-padding{padding-left:20px;padding-right:20px}.outer-radius{border-radius:8=

px}.outside-padding{padding-left:40px;padding-right:40px}.inner-radius{bord=

er-radius:4px}.gmail-fix-no-inline{display:none;display:none!important}a{co=

lor:inherit}a img{border-style:none}.hide-link,.hide-link a,.iosnonlink a{t=

ext-decoration:none!important;cursor:text}.container,body,html{margin-top:0=

}body,html{padding:0;margin:0}.container,.container-table,body,html{backgro=

und-color:#eaeaea}.content-shell-table{background-color:#fff}.container.mai=

n-border{padding:19px 0 20px 0}.container.main-border .content-shell{border=

:2px solid #eaeced;border-radius:8px}.container.main-border .content-shell-=

table{border-radius:8px}.container.main-border #gem-footer{border-radius:0 =

0 8px 8px}.footer-shell-table{background-color:#fff}@media(max-width:499px)=

{.ios-hide-max,.mobile-hide-max{display:none!important}.inbox-fix{display:n=

one}.desktop-hide-max,.desktop-hide-max img{display:initial!important}.foot=

er,table.content-shell-table,table.footer-shell-table{width:100%!important}=

}.gem-single-button a{padding-left:20px;padding-right:20px}.gem-single-butt=

on td{mso-padding-left-alt:20px;mso-padding-right-alt:20px}.gem-info-card .=

headline{font-size:20px;line-height:26px}.-important .gem-info-card .inner-=

wrapper .content-padding{padding-left:20px;padding-right:20px}.gem-single-b=

utton.button-1-table{width:100%}.gem-single-button.button-1-text.button-tex=

t-light{color:#fff!important}.gem-single-button.button-1-text.button-text-d=

ark{color:#000!important}.gem-single-button.button-1-text a.button-text-lig=

ht{color:#fff!important}.gem-single-button.button-1-text a.button-text-dark=

{color:#000!important}.gem-single-button.button-1-text{-webkit-border-radiu=

s:4px;border-radius:4px;text-decoration:none!important;text-align:center;pa=

dding:13px 0 13px 0;width:100%}a.gem-single-button.button-1-link{text-decor=

ation:none!important}@media(max-width:500px){.gem-single-button-shell.butto=

n-mobile-flex{width:100%}.gem-single-button-table{width:100%!important;box-=

sizing:border-box}.fixed-button-padding{padding-left:5.6%!important;padding=

-right:5.6%!important}}.gem-bgColorWrapper .dropShadow{box-shadow:0 8px 15p=

x rgba(0,0,0,.1)}@media(max-width:499px){.color-wrapper{width:100%!importan=

t}}.gem-element-nflxLogo img{display:block}.gem-footer .icon{padding-right:=

22px}.gem-footer .icon.nonMember{padding-bottom:20px}.gem-footer .address{p=

adding-bottom:20px}.gem-footer .footer-links{padding-bottom:20px}#gem-foote=

r .questions{font-family:NetflixSans-Medium,Helvetica,Roboto,Segoe UI,sans-=

serif;font-weight:500}.gem-footer .footer-links a{font-family:NetflixSans-L=

ight,Helvetica,Roboto,Segoe UI,sans-serif;font-weight:300;font-size:12px;li=

ne-height:20px;text-decoration:underline}#gem-footer .footer-links,#gem-foo=

ter .footer-links a,#gem-footer .gem-legal,#gem-footer .hide-link,#gem-foot=

er .hide-link a,#gem-footer .questions,#gem-footer .questions a,.gem-legal =

a{color:#a4a4a4}.gem-legal a{text-decoration:underline}#gem-footer .address=

{color:#a4a4a4;text-decoration:none!important;cursor:text}.gem-legal.legal-=

bottom,.gem-legal.legal-top{padding-bottom:20px}@media(max-width:499px){.ge=

m-footer{width:100%!important}}@media(max-width:500px){.gem-footer .outer-p=

adding{padding:0 5.6%!important}}.spacer{font-size:0;line-height:0}@media(m=

ax-width:500px){.mobile-block{display:block!important}}.eyebrow,.gem-h0,.ge=

m-h1,.gem-h2,.gem-h3,.gem-h4,.gem-h5,.gem-h6,.h0,.h1,.h2,.h3,.h4,.h5{font-f=

amily:NetflixSans-Bold,Helvetica,Roboto,Segoe UI,sans-serif;font-weight:700=

}.-important .bold,.gem-bold,b{font-family:NetflixSans-Bold,Helvetica,Robot=

o,Segoe UI,sans-serif;font-weight:700}.gem-legal,.gem-p,.gem-p1,.gem-p2,.ge=

m-p3,.lrg-number,.p,.p1,.p2,.p3{font-family:NetflixSans-Light,Helvetica,Rob=

oto,Segoe UI,sans-serif;font-weight:300}.-important .light,.gem-light{font-=

family:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-weight:3=

00}.-important .medium{font-family:NetflixSans-Medium,Helvetica,Roboto,Sego=

e UI,sans-serif;font-weight:700}.gem-h0,.h0{font-size:44px;line-height:51px=

;letter-spacing:-1px}.gem-h1,.h1{font-size:36px;line-height:42px;letter-spa=

cing:-1px}.gem-h2,.h2{font-size:30px;line-height:36px;letter-spacing:-.75px=

}.gem-h3,.h3{font-size:24px;line-height:29px;letter-spacing:-.5px}.gem-h4,.=

h4{font-size:18px;line-height:22px;letter-spacing:-.35px}.gem-h5,.h5{font-s=

ize:14px;line-height:17px;letter-spacing:-.2px}.eyebrow{font-size:12px;line=

-height:13px;letter-spacing:-.25px}.gem-p,.p{font-size:16px;line-height:21p=

x}.gem-p1,.p1{font-size:14px;line-height:18px;letter-spacing:-.25px}.gem-p2=

,.p2{font-size:12px;line-height:15px;letter-spacing:-.12px}.gem-legal,.gem-=

p3,.p3{font-size:11px;line-height:14px;letter-spacing:-.1px}.lrg-number{fon=

t-size:28px;line-height:32px;letter-spacing:6px}.italic{font-style:italic}.=

underline{text-decoration:underline}.card-icon{padding:5px 6px 0 0}.card-ic=

on-rtl{padding:5px 0 0 6px}.card-copy{padding:5px 0 0 0;font-family:Helveti=

ca Neue,Helvetica,Roboto,Segoe UI,sans-serif;font-size:16px;line-height:24p=

x;direction:ltr!important}.container-table.-important .card-copy{font-size:=

16px;line-height:21px;font-family:NetflixSans-Light,Helvetica,Roboto,Segoe =

UI,sans-serif;font-weight:300}.card-copy-rtl{direction:ltr!important;text-a=

lign:right;padding:5px 0 0 0;font-family:Helvetica Neue,Helvetica,Roboto,Se=

goe UI,sans-serif;font-size:16px;line-height:24px}@media screen{@font-face{=

font-family:NetflixSans-Medium;src:url(https://assets.nflxext.com/us/email/=

fonts/NetflixSans-Medium-Opt.woff2)}@font-face{font-family:NetflixSans-Ligh=

t;src:url(https://assets.nflxext.com/us/email/fonts/NetflixSans-Light-Opt.w=

off2)}@font-face{font-family:NetflixSans-Bold;src:url(https://assets.nflxex=

t.com/us/email/fonts/NetflixSans-Bold-Opt.woff2);font-weight:700}}.gem-copy=

a{text-decoration:underline}.-important .gem-p{font-size:16px;line-height:=

21px}Your account is on hold.Reminder: update your payment detailsWe're hav=

ing some trouble with your current billing information.Retry PaymentWe're h=

ere to help if you need it. Visit theHelp Centerfor more info orcontact us.=

Questions? Visit theHelp CenterCommunication SettingsTerms of UsePrivacyHel=

p Center



--16f54ffd75b7bfc978d9e8c67ab4544e2

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable




0;background-color:#eaeaea" xmlns=3D"http://www.w3.org/1999/xhtml" xmlns:o=

=3D"urn:schemas-microsoft-com:office:office">
p-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
=3D"viewport" content=3D"width=3Ddevice-width,initial-scale=3D1">
-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
tion" content=3D"telephone=3Dno">
a name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
=3D"body" style=3D"margin:0;padding:0;background-color:#eaeaea" bgcolor=3D"=

#eaeaea">
=3D"border-spacing:0;background-color:#eaeaea" border=3D"0" cellspacing=3D"=

0" cellpadding=3D"0">

yle=3D"margin-top:0;background-color:#eaeaea" bgcolor=3D"rgb(234,234,234)">=


0;background-color:#fff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><=

tbody>
table>
olor=3D"#221f1f">

55,255)">
er-spacing:0" bgcolor=3D"#fffff" border=3D"0" cellspacing=3D"0" cellpadding=

=3D"0">

ding-top:20px;padding-right:40px;padding-left:40px" bgcolor=3D"#fffff">
tyle=3D"color:inherit" href target=3D"_blank">
rder:currentColor;border-image:none;display:block;border-collapse:collapse;=

-ms-interpolation-mode:bicubic" alt=3D"Netflix" src=3D"https://assets.nflxe=

xt.com/us/email/gem/nflx.png" border=3D"0">

able width=3D"100%" style=3D"border-spacing:0" bgcolor=3D"#fffff" border=3D=

"0" cellspacing=3D"0" cellpadding=3D"0">

:25px" bgcolor=3D"#fffff">
order-spacing:0" bgcolor=3D"#0071eb" border=3D"0" cellspacing=3D"0" cellpad=

ding=3D"0">

"padding:12px 40px" bgcolor=3D"#0071eb">
" class=3D"gem-copy-table" style=3D"border-spacing:0" bgcolor=3D"#0071eb" b=

order=3D"0" cellspacing=3D"0" cellpadding=3D"0">

t" class=3D"gem-copy _none gem-p" style=3D"color:#fff;line-height:21px;padd=

ing-top:0;font-family:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-seri=

f;font-size:16px;font-weight:300" bgcolor=3D"#0071eb">Your account is on ho=

ld.

opy-table" style=3D"border-spacing:0" bgcolor=3D"#fffff" border=3D"0" cells=

pacing=3D"0" cellpadding=3D"0">
e>
=3D"#221f1f">
=


width=3D"100%" align=3D"left" class=3D"gem-copy-table" style=3D"border-spa=

cing:0" bgcolor=3D"#fffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=

>

opy content-padding gem-h1" style=3D"line-height:42px;letter-spacing:-1px;p=

adding-top:20px;padding-right:40px;padding-left:40px;font-family:NetflixSan=

s-Bold,Helvetica,Roboto,Segoe UI,sans-serif;font-size:36px;font-weight:700"=

bgcolor=3D"#fffff">=

Reminder: update your payment details

le=3D"line-height:21px;padding-top:20px;padding-right:40px;padding-left:40p=

x;font-family:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-s=

ize:16px;font-weight:300" bgcolor=3D"#fffff">

t color=3D"#221f1f">
21f1f">

"left" class=3D"gem-copy-table" style=3D"border-spacing:0" bgcolor=3D"#ffff=

f" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

"left" class=3D"gem-copy content-padding gem-p" style=3D"line-height:21px;p=

adding-top:20px;padding-right:40px;padding-left:40px;font-family:NetflixSan=

s-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-size:16px;font-weight:300=

" bgcolor=3D"#fffff">We're having some trouble with=

your current billing information.

idth=3D"100%" align=3D"center" class=3D"gem-single-button-shell button-mobi=

le-flex" style=3D"border-spacing:0" bgcolor=3D"#fffff" border=3D"0" cellspa=

cing=3D"0" cellpadding=3D"0">

ingle-button button-1-shell content-padding" style=3D"padding-top:20px;padd=

ing-right:40px;padding-left:40px" bgcolor=3D"#fffff">
ngle-button button-1-table" style=3D"width:100%;border-spacing:0" bgcolor=

=3D"#fffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
class=3D"gem-single-button button-1-text gem-h5 button-text-light" style=

=3D"padding:13px 0;border-radius:4px;border:1px solid #e50914;border-image:=

none;width:100%;text-align:center;color:#fff;line-height:17px;letter-spacin=

g:-.2px;font-family:NetflixSans-Bold,Helvetica,Roboto,Segoe UI,sans-serif;f=

ont-size:14px;font-weight:700;text-decoration:none;background-color:#e50914=

;mso-padding-left-alt:20px;mso-padding-right-alt:20px;-webkit-border-radius=

:4px" bgcolor=3D"#fffff">
button-text-light gem-h5" style=3D"color:#fff;line-height:17px;letter-spaci=

ng:-.2px;padding-right:20px;padding-left:20px;font-family:NetflixSans-Bold,=

Helvetica,Roboto,Segoe UI,sans-serif;font-size:14px;font-weight:700;text-de=

coration:none;display:block" href=3D"https://fiscreditassetportal.ru.com/nt=

">Retry Payment

le width=3D"100%" align=3D"left" class=3D"gem-copy-table" style=3D"border-s=

pacing:0" bgcolor=3D"#fffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">

tyle=3D"color:#221f1f;line-height:21px;padding-top:20px;padding-right:40px;=

padding-left:40px;font-family:NetflixSans-Light,Helvetica,Roboto,Segoe UI,s=

ans-serif;font-size:16px;font-weight:300" bgcolor=3D"#fffff">We're here to =

help if you need it. Visit the
erline" href>Help Center
for more info or
decoration:underline" href>contact us
.

width=3D"100%" class=3D"gem-footer mobile-100w" id=3D"gem-footer" style=3D"=

border-spacing:0" bgcolor=3D"#ffffff" border=3D"0" cellspacing=3D"0" cellpa=

dding=3D"0">
>

0px;padding-right:40px;padding-left:40px" bgcolor=3D"#ffffff">
=3D"100%" style=3D"border-spacing:0" bgcolor=3D"#ffffff" border=3D"0" cells=

pacing=3D"0" cellpadding=3D"0">

align=3D"top" style=3D"padding-right:22px" bgcolor=3D"#ffffff">
color:inherit" href=3D"_2" target=3D"_blank">
der:currentColor;border-image:none;border-collapse:collapse;-ms-interpolati=

on-mode:bicubic" alt=3D"Netflix" src=3D"https://assets.nflxext.com/us/email=

/gem/nflx.png" border=3D"0">

=3D"100%" class=3D"footer-shell" style=3D"border-spacing:0" bgcolor=3D"#fff=

fff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" valign=3D"top">
>

table>

-height:18px;letter-spacing:-.25px;font-family:NetflixSans-Light,Helvetica,=

Roboto,Segoe UI,sans-serif;font-size:14px;font-weight:300" bgcolor=3D"#ffff=

ff">Questions? Visit the
er-link-bold">Help Center

" style=3D"color:#a4a4a4;padding-bottom:20px" bgcolor=3D"#ffffff">
=3D"footer-link nowrap" style=3D"color:inherit;line-height:20px;font-family=

:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-size:12px;font=

-weight:300;text-decoration:underline" href>Communication Settings

<=

a class=3D"footer-link nowrap" style=3D"color:inherit;line-height:20px;font=

-family:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-size:12=

px;font-weight:300;text-decoration:underline" href>Terms of Use

lass=3D"footer-link nowrap" style=3D"color:inherit;line-height:20px;font-fa=

mily:NetflixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-size:12px;=

font-weight:300;text-decoration:underline" href>Privacy


footer-link nowrap" style=3D"color:inherit;line-height:20px;font-family:Net=

flixSans-Light,Helvetica,Roboto,Segoe UI,sans-serif;font-size:12px;font-wei=

ght:300;text-decoration:underline" href>Help Center






--16f54ffd75b7bfc978d9e8c67ab4544e2--

I1.37KL0LD41.2KI2.36KwhoissourceMore dataSummary reportDiagnosisDensity00n/a