netflix phish from mailhostbox.com
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Jan 2024 13:05:42 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rPotn-00000000PAH-1YQg
for dave@doctor.nl2k.ab.ca;
Tue, 16 Jan 2024 12:14:59 -0700
Resent-From: The Doctor
Resent-Date: Tue, 16 Jan 2024 12:14:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from us3-ob1-7.mailhostbox.com ([74.119.239.3]:54891)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rPmaK-00000000LJY-0euz
for sales@nk.ca;
Tue, 16 Jan 2024 09:46:52 -0700
Received: from 195.138.87.39 (unknown [104.167.228.168])
(Authenticated sender: webmaster151@id6598295.de)
by us3.outbound.mailhostbox.com (Postfix) with ESMTPA id 7F7AF2084DD
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=id6598295.de;
s=20240116; t=1705423479;
bh=EfmzZUdaxTSl2btehzMFxJ8PF7kB4ILqe1vmLNY44NU=;
h=From:Subject:To:Date;
b=S0Lc5j+3PIunkZ9mt9GAg+z3PIMrjrltxyhaccdXLkhojLvO5BoejpwX/PBDxQrLZ
m9iFpI2SUyR0a4ZfrDG5cT9FCPl3wkpnwMpq4m79rIzMOLqzIp475qr3rjv5do6ICo
k4Akr1/8kRGfTmDD6Ud2ddCGb9NJdqkwS5dwbMoQ=
From: "Notification"
Subject: Action required #Ref0155444
To: "sales"
Content-Type: multipart/alternative; boundary="h8t9X=_feelNau6wz7KWYadiCjrS9Gmd12"
MIME-Version: 1.0
Date: Tue, 16 Jan 2024 17:44:38 +0100
Priority: urgent
X-Priority: 1
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=G4Z/r/o5 c=1 sm=1 tr=0 ts=65a6b277
a=Dt9xYYmbAa7vUx/n1M7mbw==:117 a=Dt9xYYmbAa7vUx/n1M7mbw==:17
a=HpEJnUlJZJkA:10 a=9DvhAHx2yrWFMPxQWpQA:9 a=jMng_j23olNCsaMXWP4A:9
a=QEXdDO2ut3YA:10 a=zgiPjhLxNE0A:10 a=zZCYzV9kfG8A:10 a=QCku8qPWAAAA:8
a=shdHtCdrY2EERZtDzDoA:9 a=KE3Fmd8In4eSUG0R:21 a=_W_S_7VecoQA:10
a=rhiJMFqoQUbbfZK-F1AY:22
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: NetfIix Dear Valued Customer, We regret to inform you that
your Netflix subscription is at risk of being disrupted due to an issue with
your payment method. It is crucial that you take immediate action to avoid
any interruptions i [...]
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: id6598295.de]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.119.239.3 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 FSL_HELO_BARE_IP_2 No description available.
Subject: {SPAM?} Action required #Ref0155444
This is a multi-part message in MIME format
--h8t9X=_feelNau6wz7KWYadiCjrS9Gmd12
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BFNetfIix
Dear Valued Customer,
We regret to inform you that your Netflix subscription is at risk =
of being disrupted due to an issue with your payment method. It is cru=
cial that you take immediate action to avoid any interruptions in your=
viewing experience.
Unfortunately, we were unable to automatically renew your subscription=
as your bank has declined the automatic payment. This can happen for =
various reasons, such as insufficient funds or an expired card.
To continue enjoying a wide range of movies, TV shows, and exclusive c=
ontent, we kindly request you to manually confirm the payment of 14.99=
USD for your Netflix subscription by clicking on the link below:
pay now
Please note that failure to make the payment within 48 hours may resul=
t in the suspension of your account and loss of access to our platform=
=2E
Act now and secure your continued access to the world of entertainment=
that Netflix provides.
Best regards,
Netflix Support Team
--h8t9X=_feelNau6wz7KWYadiCjrS9Gmd12
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
r=3D"auto">NetfIix
ong>
Dear Valued Customer,
We regret to inform you th=
at your Netflix=20
subscription is at risk of being disrupted due to an issue with your=20=
payment method. It is crucial that you take immediate action to avoid=20=
any interruptions in your viewing experience.
Unfor=
tunately,
we were unable to automatically renew your subscription as your bank=20=
has declined the automatic payment. This can happen for various reason=
s,
such as insufficient funds or an expired card.
To continue enjoying a wide range of movies, TV sh=
ows, and
exclusive content, we kindly request you to manually confirm the=20
payment of 14.99
none; text-indent: 0px; letter-spacing: normal; font-family: "Google =
Sans", arial, sans-serif; font-size: 16px; font-style: normal; font-we=
ight: 400; word-spacing: 0px; float: none; display: inline !important;=
white-space: normal; orphans: 2; widows: 2; background-color: rgb(255=
, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal=
; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =
text-decoration-style: initial; text-decoration-color: initial;'>
ng>USD for your Netflix subscription by clicking on th=
e link below:
right: auto; margin-left: auto; border-collapse: collapse;" border=3D"=
1">
"http://id0265481.homelinux.net/">
>pay now
Please note that failure to make the payment withi=
n 48=20
hours may result in the suspension of your account and loss of access =
to
our platform.
Act now and secure your continued access to the wo=
rld of entertainment that Netflix provides.
Best regards,
Netflix Support Team
--h8t9X=_feelNau6wz7KWYadiCjrS9Gmd12--
I1.18KL0LD35.4KI2.16KwhoissourceRank10.8MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments