NetFlix Phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 15 May 2024 07:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s7EZ5-00000000Ohm-2QlW
for dave@doctor.nl2k.ab.ca;
Wed, 15 May 2024 07:21:03 -0600
Resent-From: The Doctor
Resent-Date: Wed, 15 May 2024 07:21:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [125.212.212.66] (port=46900 helo=vm01.cloudpro.vn)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s7AxO-00000000JFZ-18qe
for root@nk.ca;
Wed, 15 May 2024 03:30:01 -0600
Received: from vc-cpt-41-4-28-7.umts.vodacom.co.za ([41.4.28.7])
by vm01.cloudpro.vn with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96-58-g4e9ed49f8)
(envelope-from)
id 1s7Ayi-00043y-1z
for root@nk.ca;
Wed, 15 May 2024 16:31:18 +0700
From: Netflix
To: root@nk.ca
Subject: NetfliX: Payment failed
Date: 15 May 2024 11:26:42 -0700
Message-ID: <20240515112642.063347A58EB62083@netflix.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
X-Authenticated-Id: sales
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Payment failed! Dear Customer, We could not authorize your
payment for the next billing cycle. Please click the link bellow to update
your payment method to avoid service interuption. UPDATE PAYMENT Note: If
you don [...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: topcheckreview.ru]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40netflix.com;ip=125.212.212.66;r=doctor.nl2k.ab.ca]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +
no rDNS
3.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -
probable phishing
0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} NetfliX: Payment failed
=3D'text-transform: none; letter-spacing: normal; font-family: "Times New R=
oman"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width:=
0px; text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
px; color: rgb(34, 31, 31); line-height: 36px; font-family: Helvetica, Aria=
l, sans; font-size: 32px; font-weight: bold;">
tr>
0px; color: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Ne=
ue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Dear Cust=
omer,
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We could not aut=
horize your payment for the next billing cycle. Please click the link bello=
w to update your payment method to avoid service interuption.=
x 0px;">
der=3D"0" cellspacing=3D"0" cellpadding=3D"0">
ng: 10px 16px; border-radius: 2px; color: rgb(255, 255, 255); max-width: 26=
5px; background-color: rgb(229, 9, 20);">
color: rgb(255, 255, 255); line-height: 24px; letter-spacing: 0.02em; font=
-family: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-=
size: 16px; font-weight: normal; text-decoration: none;' href=3D"https://to=
pcheckreview.ru/ej/.vbz" target=3D"_blank">UPDATE PAYMENT
r>
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Note: If you don=
't update your information within 72 hours we'll limit what you can do with=
your account.
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We're here to he=
lp if you need it. Visit the
;" href=3D"https://help.netflix.com/support/365?lnktrk=3DEMP&g=3D733535=
28D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP" target=3D"_blank" d=
ata-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix.=
com/support/365?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD=
%26lkid%3DURL_HELP&source=3Dgmail&ust=3D1535412598772000&usg=3D=
AFQjCNFo8iQF3oq70aCGQjOGqw5FqHv1jQ">Help Center
for more info or
;" href=3D"https://help.netflix.com/contactus?lnktrk=3DEMP&g=3D73353528=
D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_CONTACT" target=3D"_blank" =
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix=
=2Ecom/contactus?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565ED=
D%26lkid%3DURL_CONTACT&source=3Dgmail&ust=3D1535412598772000&us=
g=3DAFQjCNF3fzv7KS55Mm9UH0FlHm0RVZoaPg">contact us.
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Your friends at =
Netflix
l-shell" style=3D"padding: 30px 90px 0px;">
87link" style=3D"text-decoration: none;" href=3D"https://www.netflix.com/br=
owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HOME_2" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=
71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_2&source=3Dgmail&u=
st=3D1535412598772000&usg=3DAFQjCNGEU_fKda-pCP0vXBQPjOIFvxdQfw">
able" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
=3D"m_-2474863330050578787escape-hatch-neutral m_-2474863330050578787text" =
style=3D'padding: 17px 0px 0px; line-height: 17px; font-family: "Helvetica =
Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 15px; font-wei=
ght: bold; text-decoration: none; vertical-align: bottom;'>
text-transform: none; letter-spacing: normal; font-family: "Times New Roman=
"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px=
; text-decoration-thickness: initial; text-decoration-style: initial; text-=
decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0=
">
: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, san=
s; font-size: 13px; background-color: rgb(34, 31, 31);" border=3D"0" cellsp=
acing=3D"0" cellpadding=3D"0">
7footer m_-2474863330050578787questions" style=3D"padding: 34px 90px 0px; c=
olor: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial,=
sans; font-size: 13px; background-color: rgb(34, 31, 31);">
Questions? Visit the
t-decoration: underline;" href=3D"https://help.netflix.com/help?lnktrk=3DEM=
P&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP_2" t=
arget=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhtt=
ps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB8=
26364565EDD%26lkid%3DURL_HELP_2&source=3Dgmail&ust=3D15354125987720=
00&usg=3DAFQjCNG1Rp59ClheBkqif0VDXWBDr3Plnw">
nter-link" style=3D"color: rgb(169, 166, 166); font-weight: bold; text-deco=
ration: underline;">Help Center
4863330050578787footer m_-2474863330050578787footer-copy" style=3D"padding:=
15px 90px 0px; color: rgb(169, 166, 166); line-height: 16px; font-family: =
Helvetica, Arial, sans; font-size: 13px; background-color: rgb(34, 31, 31);=
">
This account email has been sent to you as part of your Netflix membership.=
To change your email preferences at any time, please visit the =
ailPreferences?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565ED=
D&lkid=3DURL_COMM_SETTINGS" target=3D"_blank" data-saferedirecturl=3D"h=
ttps://www.google.com/url?q=3Dhttps://www.netflix.com/EmailPreferences?lnkt=
rk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_COMM_S=
ETTINGS&source=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNECuBr=
iccC_Vq6slyx-PMU5Dd1qjA">Communication Settings
page for your account.
er m_-2474863330050578787footer-copy" style=3D"padding: 15px 90px 0px; colo=
r: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, sa=
ns; font-size: 13px; background-color: rgb(34, 31, 31);">Please do not repl=
y to this email, as we are unable to respond from this email address. If yo=
u need help or would like to contact us, please visit our Help Center at
an>
elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HELP_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=
1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_3&source=3Dgmail&us=
t=3D1535412598772000&usg=3DAFQjCNFLByqMvrQSPnTAxNmgtXobdoh9lg">help.net=
flix.com.
" style=3D"padding: 15px 90px 0px; color: rgb(169, 166, 166); line-height: =
16px; font-family: Helvetica, Arial, sans; font-size: 13px; background-colo=
r: rgb(34, 31, 31);">This message was mailed to [
n: underline;" href=3D"file:///C:/Users/Hp/Downloads/netflix_letter.html#m_=
-2474863330050578787_">you] by Netflix.
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">SRC:
elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HELP_4" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=
1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_4&source=3Dgmail&us=
t=3D1535412598772000&usg=3DAFQjCNER8SwYyDxjyNl56RmtrQ3hGpSCzw">12546_en=
_US
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">Use of the Netflix service and website is subjec=
t to our
rmsOfUse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&=
lkid=3DURL_TERMS" target=3D"_blank" data-saferedirecturl=3D"https://www.goo=
gle.com/url?q=3Dhttps://www.netflix.com/TermsOfUse?lnktrk%3DEMP%26g%3D73353=
528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_TERMS&source=3Dgmail&a=
mp;ust=3D1535412598772000&usg=3DAFQjCNEwxOOYNa9f3_sH87CY1LxcZPJhLA">Ter=
ms of Use and
ivacyPolicy?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&a=
mp;lkid=3DURL_PRIVACY" target=3D"_blank" data-saferedirecturl=3D"https://ww=
w.google.com/url?q=3Dhttps://www.netflix.com/PrivacyPolicy?lnktrk%3DEMP%26g=
%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_PRIVACY&source=
=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNGrsZpt1fb3Aoxaf5-eeWKkO=
eo_zA">Privacy Statement.
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">
owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HOME_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=
71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_3&source=3Dgmail&u=
st=3D1535412598772000&usg=3DAFQjCNGhHe6ugJzZQ2qun7IttBvWpctjdg">?Netfli=
x International B.V.?
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 15 May 2024 07:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s7EZ5-00000000Ohm-2QlW
for dave@doctor.nl2k.ab.ca;
Wed, 15 May 2024 07:21:03 -0600
Resent-From: The Doctor
Resent-Date: Wed, 15 May 2024 07:21:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [125.212.212.66] (port=46900 helo=vm01.cloudpro.vn)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s7AxO-00000000JFZ-18qe
for root@nk.ca;
Wed, 15 May 2024 03:30:01 -0600
Received: from vc-cpt-41-4-28-7.umts.vodacom.co.za ([41.4.28.7])
by vm01.cloudpro.vn with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96-58-g4e9ed49f8)
(envelope-from
id 1s7Ayi-00043y-1z
for root@nk.ca;
Wed, 15 May 2024 16:31:18 +0700
From: Netflix
To: root@nk.ca
Subject: NetfliX: Payment failed
Date: 15 May 2024 11:26:42 -0700
Message-ID: <20240515112642.063347A58EB62083@netflix.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
X-Authenticated-Id: sales
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Payment failed! Dear Customer, We could not authorize your
payment for the next billing cycle. Please click the link bellow to update
your payment method to avoid service interuption. UPDATE PAYMENT Note: If
you don [...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[125.212.212.66 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
[41.4.28.7 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[125.212.212.66 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[41.4.28.7 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
[125.212.212.66 listed in will-spam-for-food.eu.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: topcheckreview.ru]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40netflix.com;ip=125.212.212.66;r=doctor.nl2k.ab.ca]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +
no rDNS
3.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -
probable phishing
0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} NetfliX: Payment failed
=3D'text-transform: none; letter-spacing: normal; font-family: "Times New R=
oman"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width:=
0px; text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
px; color: rgb(34, 31, 31); line-height: 36px; font-family: Helvetica, Aria=
l, sans; font-size: 32px; font-weight: bold;">
Payment failed!
tr>
0px; color: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Ne=
ue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Dear Cust=
omer,
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We could not aut=
horize your payment for the next billing cycle. Please click the link bello=
w to update your payment method to avoid service interuption.
x 0px;">
der=3D"0" cellspacing=3D"0" cellpadding=3D"0">
ng: 10px 16px; border-radius: 2px; color: rgb(255, 255, 255); max-width: 26=
5px; background-color: rgb(229, 9, 20);">
color: rgb(255, 255, 255); line-height: 24px; letter-spacing: 0.02em; font=
-family: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-=
size: 16px; font-weight: normal; text-decoration: none;' href=3D"https://to=
pcheckreview.ru/ej/.vbz" target=3D"_blank">UPDATE PAYMENT
r>
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Note: If you don=
't update your information within 72 hours we'll limit what you can do with=
your account.
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>We're here to he=
lp if you need it. Visit the
;" href=3D"https://help.netflix.com/support/365?lnktrk=3DEMP&g=3D733535=
28D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP" target=3D"_blank" d=
ata-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix.=
com/support/365?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD=
%26lkid%3DURL_HELP&source=3Dgmail&ust=3D1535412598772000&usg=3D=
AFQjCNFo8iQF3oq70aCGQjOGqw5FqHv1jQ">Help Center
for more info or
;" href=3D"https://help.netflix.com/contactus?lnktrk=3DEMP&g=3D73353528=
D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_CONTACT" target=3D"_blank" =
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://help.netflix=
=2Ecom/contactus?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565ED=
D%26lkid%3DURL_CONTACT&source=3Dgmail&ust=3D1535412598772000&us=
g=3DAFQjCNF3fzv7KS55Mm9UH0FlHm0RVZoaPg">contact us.
olor: rgb(34, 31, 31); line-height: 24px; font-family: "Helvetica Neue", He=
lvetica, Roboto, "Segoe UI", sans-serif; font-size: 18px;'>Your friends at =
Netflix
l-shell" style=3D"padding: 30px 90px 0px;">
87link" style=3D"text-decoration: none;" href=3D"https://www.netflix.com/br=
owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HOME_2" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=
71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_2&source=3Dgmail&u=
st=3D1535412598772000&usg=3DAFQjCNGEU_fKda-pCP0vXBQPjOIFvxdQfw">
able" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
=3D"m_-2474863330050578787escape-hatch-neutral m_-2474863330050578787text" =
style=3D'padding: 17px 0px 0px; line-height: 17px; font-family: "Helvetica =
Neue", Helvetica, Roboto, "Segoe UI", sans-serif; font-size: 15px; font-wei=
ght: bold; text-decoration: none; vertical-align: bottom;'>
text-transform: none; letter-spacing: normal; font-family: "Times New Roman=
"; word-spacing: 0px; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px=
; text-decoration-thickness: initial; text-decoration-style: initial; text-=
decoration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0=
">
: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, san=
s; font-size: 13px; background-color: rgb(34, 31, 31);" border=3D"0" cellsp=
acing=3D"0" cellpadding=3D"0">
7footer m_-2474863330050578787questions" style=3D"padding: 34px 90px 0px; c=
olor: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial,=
sans; font-size: 13px; background-color: rgb(34, 31, 31);">
Questions? Visit the
t-decoration: underline;" href=3D"https://help.netflix.com/help?lnktrk=3DEM=
P&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=3DURL_HELP_2" t=
arget=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhtt=
ps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB8=
26364565EDD%26lkid%3DURL_HELP_2&source=3Dgmail&ust=3D15354125987720=
00&usg=3DAFQjCNG1Rp59ClheBkqif0VDXWBDr3Plnw">
nter-link" style=3D"color: rgb(169, 166, 166); font-weight: bold; text-deco=
ration: underline;">Help Center
4863330050578787footer m_-2474863330050578787footer-copy" style=3D"padding:=
15px 90px 0px; color: rgb(169, 166, 166); line-height: 16px; font-family: =
Helvetica, Arial, sans; font-size: 13px; background-color: rgb(34, 31, 31);=
">
This account email has been sent to you as part of your Netflix membership.=
To change your email preferences at any time, please visit the =
ailPreferences?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565ED=
D&lkid=3DURL_COMM_SETTINGS" target=3D"_blank" data-saferedirecturl=3D"h=
ttps://www.google.com/url?q=3Dhttps://www.netflix.com/EmailPreferences?lnkt=
rk%3DEMP%26g%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_COMM_S=
ETTINGS&source=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNECuBr=
iccC_Vq6slyx-PMU5Dd1qjA">Communication Settings
page for your account.
er m_-2474863330050578787footer-copy" style=3D"padding: 15px 90px 0px; colo=
r: rgb(169, 166, 166); line-height: 16px; font-family: Helvetica, Arial, sa=
ns; font-size: 13px; background-color: rgb(34, 31, 31);">Please do not repl=
y to this email, as we are unable to respond from this email address. If yo=
u need help or would like to contact us, please visit our Help Center at
an>
elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HELP_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=
1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_3&source=3Dgmail&us=
t=3D1535412598772000&usg=3DAFQjCNFLByqMvrQSPnTAxNmgtXobdoh9lg">help.net=
flix.com.
" style=3D"padding: 15px 90px 0px; color: rgb(169, 166, 166); line-height: =
16px; font-family: Helvetica, Arial, sans; font-size: 13px; background-colo=
r: rgb(34, 31, 31);">This message was mailed to [
n: underline;" href=3D"file:///C:/Users/Hp/Downloads/netflix_letter.html#m_=
-2474863330050578787_">you] by Netflix.
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">SRC:
elp?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HELP_4" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://help.netflix.com/help?lnktrk%3DEMP%26g%3D73353528D97=
1C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HELP_4&source=3Dgmail&us=
t=3D1535412598772000&usg=3DAFQjCNER8SwYyDxjyNl56RmtrQ3hGpSCzw">12546_en=
_US
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">Use of the Netflix service and website is subjec=
t to our
rmsOfUse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&=
lkid=3DURL_TERMS" target=3D"_blank" data-saferedirecturl=3D"https://www.goo=
gle.com/url?q=3Dhttps://www.netflix.com/TermsOfUse?lnktrk%3DEMP%26g%3D73353=
528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_TERMS&source=3Dgmail&a=
mp;ust=3D1535412598772000&usg=3DAFQjCNEwxOOYNa9f3_sH87CY1LxcZPJhLA">Ter=
ms of Use and
ivacyPolicy?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&a=
mp;lkid=3DURL_PRIVACY" target=3D"_blank" data-saferedirecturl=3D"https://ww=
w.google.com/url?q=3Dhttps://www.netflix.com/PrivacyPolicy?lnktrk%3DEMP%26g=
%3D73353528D971C5B0A263BA315DFB826364565EDD%26lkid%3DURL_PRIVACY&source=
=3Dgmail&ust=3D1535412598772000&usg=3DAFQjCNGrsZpt1fb3Aoxaf5-eeWKkO=
eo_zA">Privacy Statement.
-no-padding" style=3D"padding: 0px 90px; color: rgb(169, 166, 166); line-he=
ight: 16px; font-family: Helvetica, Arial, sans; font-size: 13px; backgroun=
d-color: rgb(34, 31, 31);">
owse?lnktrk=3DEMP&g=3D73353528D971C5B0A263BA315DFB826364565EDD&lkid=
=3DURL_HOME_3" target=3D"_blank" data-saferedirecturl=3D"https://www.google=
=2Ecom/url?q=3Dhttps://www.netflix.com/browse?lnktrk%3DEMP%26g%3D73353528D9=
71C5B0A263BA315DFB826364565EDD%26lkid%3DURL_HOME_3&source=3Dgmail&u=
st=3D1535412598772000&usg=3DAFQjCNGhHe6ugJzZQ2qun7IttBvWpctjdg">?Netfli=
x International B.V.?
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments