NetFlix Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 May 2024 07:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s7EZ5-00000000Ohm-2QlW

for dave@doctor.nl2k.ab.ca;

Wed, 15 May 2024 07:21:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 May 2024 07:21:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [125.212.212.66] (port=46900 helo=vm01.cloudpro.vn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s7AxO-00000000JFZ-18qe

for root@nk.ca;

Wed, 15 May 2024 03:30:01 -0600

Received: from vc-cpt-41-4-28-7.umts.vodacom.co.za ([41.4.28.7])

by vm01.cloudpro.vn with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.96-58-g4e9ed49f8)

(envelope-from )

id 1s7Ayi-00043y-1z

for root@nk.ca;

Wed, 15 May 2024 16:31:18 +0700

From: Netflix

To: root@nk.ca

Subject: NetfliX: Payment failed

Date: 15 May 2024 11:26:42 -0700

Message-ID: <20240515112642.063347A58EB62083@netflix.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

X-Authenticated-Id: sales

X-Spam_score: 19.7

X-Spam_score_int: 197

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Payment failed! Dear Customer, We could not authorize your

payment for the next billing cycle. Please click the link bellow to update

your payment method to avoid service interuption. UPDATE PAYMENT Note: If

you don [...]



Content analysis details: (19.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[125.212.212.66 listed in dnsbl.ahbl.org]

[125.212.212.66 listed in dnsbl.ahbl.org]

[125.212.212.66 listed in dnsbl.ahbl.org]

[125.212.212.66 listed in dnsbl.ahbl.org]

[41.4.28.7 listed in dnsbl.ahbl.org]

[41.4.28.7 listed in dnsbl.ahbl.org]

[41.4.28.7 listed in dnsbl.ahbl.org]

[41.4.28.7 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[125.212.212.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[125.212.212.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[125.212.212.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[125.212.212.66 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[41.4.28.7 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

[125.212.212.66 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: topcheckreview.ru]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40netflix.com;ip=125.212.212.66;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

3.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -

probable phishing

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} NetfliX: Payment failed










=3D'text-transform: none; letter-spacing: normal; font-family: "Times New R=

oman"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width:=

0px; text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=

=3D"0">


tr>

=








px; color: rgb(34, 31, 31); line-height: 36px; font-family: Helvetica, Aria=

l, sans; font-size: 32px; font-weight: bold;">

Payment failed!


0px; color: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Ne=

ue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Dear Cust=

omer,

olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=

lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We could not aut=

horize your payment for the next billing cycle. Please click the link bello=

w to update your payment method to avoid service interuption.

x 0px;">


der=3D"0" cellspacing=3D"0" cellpadding=3D"0">
r>

ng: 10px 16px; border-radius: 2px; color: rgb(255, 255, 255); max-width: 26=

5px; background-color: rgb(229, 9, 20);">


color: rgb(255, 255, 255); line-height: 24px; letter-spacing: 0.02em; font=

-family: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-=

size: 16px; font-weight: normal; text-decoration: none;' href=3D"https://to=

pcheckreview.ru/ej/.vbz" target=3D"_blank">UPDATE PAYMENT
 

olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=

lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Note: If you don=

't update your information within 72 hours we'll limit what you can do with=

your account.

olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=

lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We're here to he=

lp if you need it. Visit the 


;" href=3D"https://help.netflix.com/support/365?lnktrk=3DEMP&g=3D733535=

28D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP" target=3D"_blank" d=

ata-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix.=

com/support/365?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD=

%26lkid%3DURL_HELP&source=3Dgmail&ust=3D1535412598772000&usg=3D=

AFQjCNFo8iQF3oq70aCGQjOGqw5FqHv1jQ">Help Center
 

for more info or 


;" href=3D"https://help.netflix.com/contactus?lnktrk=3DEMP&g=3D73353528=

D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_CONTACT" target=3D"_blank" =

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix=

=2Ecom/contactus?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565ED=

D%26lkid%3DURL_CONTACT&source=3Dgmail&ust=3D1535412598772000&us=

g=3DAFQjCNF3fzv7KS55Mm9UH0FlHm0RVZoaPg">contact us
.

olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=

lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Your friends at =

Netflix

l-shell" style=3D"padding: 30px 90px 0px;">


87link" style=3D"text-decoration: none;" href=3D"https://www.netflix.com/br=

owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=

=3DURL_HOME_2" target=3D"_blank" data-saferedirecturl=3D"https://www.google=

=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=

71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_2&source=3Dgmail&u=

st=3D1535412598772000&usg=3DAFQjCNGEU_fKda-pCP0vXBQPjOIFvxdQfw">


able" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=


=3D"m_-2474863330050578787escape-hatch-neutral m_-2474863330050578787text" =

style=3D'padding: 17px 0px 0px; line-height: 17px; font-family: "Helvetica =

Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 15px; font-wei=

ght: bold; text-decoration: none; vertical-align: bottom;'> 



text-transform: none; letter-spacing: normal; font-family: "Times New Roman=

"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial; text-decoration-style: initial; text-=

decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0=

">




: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, san=

s; font-size: 13px; background-color: rgb(34, 31, 31);" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">








7footer m_-2474863330050578787questions" style=3D"padding: 34px 90px 0px; c=

olor: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial,=

sans; font-size: 13px; background-color: rgb(34, 31, 31);">

Questions? Visit the 
t-decoration: underline;" href=3D"https://help.netflix.com/help?lnktrk=3DEM=

P&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP_2" t=

arget=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhtt=

ps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB8=

26364565EDD%26lkid%3DURL_HELP_2&source=3Dgmail&ust=3D15354125987720=

00&usg=3DAFQjCNG1Rp59ClheBkqif0VDXWBDr3Plnw">


nter-link" style=3D"color: rgb(169, 166, 166); font-weight: bold; text-deco=

ration: underline;">Help Center

4863330050578787footer m_-2474863330050578787footer-copy" style=3D"padding:=

15px 90px 0px; color: rgb(169, 166, 166); line-height: 16px; font-family: =

Helvetica, Arial, sans; font-size: 13px; background-color: rgb(34, 31, 31);=

">

This account email has been sent to you as part of your Netflix membership.=

To change your email preferences at any time, please visit the =




ailPreferences?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565ED=

D&lkid=3DURL_COMM_SETTINGS" target=3D"_blank" data-saferedirecturl=3D"h=

ttps://www.google.com/url?q=3Dhttps://www.netflix.com/EmailPreferences?lnkt=

rk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_COMM_S=

ETTINGS&source=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNECuBr=

iccC_Vq6slyx-PMU5Dd1qjA">Communication Settings
 

page for your account.

er m_-2474863330050578787footer-copy" style=3D"padding: 15px 90px 0px; colo=

r: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, sa=

ns; font-size: 13px; background-color: rgb(34, 31, 31);">Please do not repl=

y to this email, as we are unable to respond from this email address. If yo=

u need help or would like to contact us, please visit our Help Center at
an> 


elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=

=3DURL_HELP_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=

=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=

1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_3&source=3Dgmail&us=

t=3D1535412598772000&usg=3DAFQjCNFLByqMvrQSPnTAxNmgtXobdoh9lg">help.net=

flix.com
.

" style=3D"padding: 15px 90px 0px; color: rgb(169, 166, 166); line-height: =

16px; font-family: Helvetica, Arial, sans; font-size: 13px; background-colo=

r: rgb(34, 31, 31);">This message was mailed to [
n: underline;" href=3D"file:///C:/Users/Hp/Downloads/netflix_letter.html#m_=

-2474863330050578787_">you
] by Netflix.

-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=

ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=

d-color: rgb(34, 31, 31);">SRC: 


elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=

=3DURL_HELP_4" target=3D"_blank" data-saferedirecturl=3D"https://www.google=

=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=

1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_4&source=3Dgmail&us=

t=3D1535412598772000&usg=3DAFQjCNER8SwYyDxjyNl56RmtrQ3hGpSCzw">12546_en=

_US

-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=

ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=

d-color: rgb(34, 31, 31);">Use of the Netflix service and website is subjec=

t to our 


rmsOfUse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&=

lkid=3DURL_TERMS" target=3D"_blank" data-saferedirecturl=3D"https://www.goo=

gle.com/url?q=3Dhttps://www.netflix.com/TermsOfUse?lnktrk%3DEMP%26g%3D73353=

528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_TERMS&source=3Dgmail&a=

mp;ust=3D1535412598772000&usg=3DAFQjCNEwxOOYNa9f3_sH87CY1LxcZPJhLA">Ter=

ms of Use
 and 


ivacyPolicy?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&a=

mp;lkid=3DURL_PRIVACY" target=3D"_blank" data-saferedirecturl=3D"https://ww=

w.google.com/url?q=3Dhttps://www.netflix.com/PrivacyPolicy?lnktrk%3DEMP%26g=

%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_PRIVACY&source=

=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNGrsZpt1fb3Aoxaf5-eeWKkO=

eo_zA">Privacy Statement
.

-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=

ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=

d-color: rgb(34, 31, 31);">


owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=

=3DURL_HOME_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=

=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=

71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_3&source=3Dgmail&u=

st=3D1535412598772000&usg=3DAFQjCNGhHe6ugJzZQ2qun7IttBvWpctjdg">?Netfli=

x International B.V.?

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.
Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA