scanflick phish from nxcli.net
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 Nov 2026 23:05:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xQHZ7-00000000NBU-1sh1
for dave@doctor.nl2k.ab.ca;
Sun, 08 Nov 2026 23:05:09 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 Nov 2026 23:05:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-8448537.us-midwest-1.nxcli.net ([209.87.158.171]:59794)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xQHHc-00000000GdH-10jY
for root@nk.ca;
Sun, 08 Nov 2026 22:47:05 -0600
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=05469e6f8b.nxcli.io;
b=bNr5q5kWYjgWULx4bRUBioZzJ8MZHu03ZvOojvX9uI8b4dKOu1XACl9kI9ZTQ3fhO3DT5gp/fkwn4gvSlsrcrNW6cRs95GdjSfYK2CiWgRYN1/POkqajvNU0iEOmAl072VNT4Dd/+itZLf3CWaNbQ5UHyd2z8VZj/7iNEnt5sNHJ/RL0J9OPoFzXCDDytPlgfb1HWV/Q828sErYbMsfg00MC7NqzaEnnj/UN0RV7yoc/I4Ce/7f0Qjoq5++HbqklFcRGbQwjY3cQChM0xwcWBL0eQRw7iey2WAXMVEbS6bhj1xonnFWQA7hG6Z5D1GasrnchOb95HCytoU83HcfU2A==;
h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=05469e6f8b.nxcli.io; h=
to:subject:date:from:message-id:mime-version:content-type
:content-transfer-encoding; s=default; bh=zmpil5mFFPQOqyJNeCNJTQ
L36QOiE1aQHmKDgPJitsU=; b=Y/kROx03ApR0zdW372cKc51Ly6iv6qgaUPpRm8
ieXIBDZBgWyJPtcY1FAvlsrvB7v91+tLuv0vl2Rkxk663ECJaSg4V8cJs3nOvpm/
WOM7Y/yJ3wV30HJXIlBlidmxA50T9+FCyFomPGJrRyONaj3PXc2GJOyPCXJ9amJQ
Xfjmcv2jZ27wmHbu1ktZ2EuleR9PY7xKIduOUkTqNuqn94vxENWepA+0hlj0aAlw
sBUJWprsZe+SauIq4dQ6e3J4tF6s4s0vduizZHffhbhoTgMi1ItrLcTqEeKZ6Ecy
N36lDd1sTuZfY4+4WqPBo/aMtZYLVfTP/kGhKwnp73uHZ1NA==
Received: (qmail 6347 invoked by uid 10185); 9 Nov 2026 04:44:54 +0000
To: root@nk.ca
Subject: YOUR ENTERTAINMENT DESERVES MORE!
X-PHP-Originating-Script: 10185:yo.php
Date: Mon, 9 Nov 2026 04:44:54 +0000
From: Scanflick Customer Support
Message-ID: <6ae8969a599491a41c6bd63c188ed6ad@05469e6f8b.nxcli.io>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_6ae8969a599491a41c6bd63c188ed6ad"
Content-Transfer-Encoding: 8bit
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SCANFLICK - Your Entertainment Deserves More SCANFLICK
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: scanflick.com]
0.0 URIBL_RED Contains an URL listed in the URIBL redlist
[URI: scanflick.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.87.158.171 listed in bl.score.senderscore.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} YOUR ENTERTAINMENT DESERVES MORE!
This is a multi-part message in MIME format.
--b1_6ae8969a599491a41c6bd63c188ed6ad
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
SCANFLICK - Your Entertainment Deserves More
SCANFLICK
PREMIUM ENTERTAINMENT EXPERIENCE
YOUR ENTERTAINMENT DESERVES MORE!
Welcome to SCANFLICK – Where Entertainment Meets Incredible Value!
Are you tired of spending too much money on different entertainment subscriptions?
Imagine enjoying a huge variety of entertainment without having to pay for multiple services separately!
With SCANFLICK, you can discover an entertainment experience that brings more variety, convenience, and value to your everyday viewing.
✨ WHAT MAKES US DIFFERENT?
Thousands of live TV channels from around the world.
A wide selection of movies and TV series.
Sports, live events, and entertainment.
A variety of popular entertainment content.
Support for multiple devices.
Affordable subscription plans.
Friendly customer support.
🎠FREE 24-HOUR TRIAL
Try our service before subscribing and discover what SCANFLICK has to offer!
MORE ENTERTAINMENT. LESS SPENDING.
Why settle for less when you can explore more entertainment at an affordable price?
VISIT OUR WEBSITE
Start your FREE 24-HOUR TRIAL today!
SCANFLICK TEAM
Your Entertainment. Your Savings. Your Experience.
scanflick.com
--b1_6ae8969a599491a41c6bd63c188ed6ad
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
SCANFLICK - Your Entertainment Deserves More
--b1_6ae8969a599491a41c6bd63c188ed6ad--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 Nov 2026 23:05:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xQHZ7-00000000NBU-1sh1
for dave@doctor.nl2k.ab.ca;
Sun, 08 Nov 2026 23:05:09 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 Nov 2026 23:05:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-8448537.us-midwest-1.nxcli.net ([209.87.158.171]:59794)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xQHHc-00000000GdH-10jY
for root@nk.ca;
Sun, 08 Nov 2026 22:47:05 -0600
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=05469e6f8b.nxcli.io;
b=bNr5q5kWYjgWULx4bRUBioZzJ8MZHu03ZvOojvX9uI8b4dKOu1XACl9kI9ZTQ3fhO3DT5gp/fkwn4gvSlsrcrNW6cRs95GdjSfYK2CiWgRYN1/POkqajvNU0iEOmAl072VNT4Dd/+itZLf3CWaNbQ5UHyd2z8VZj/7iNEnt5sNHJ/RL0J9OPoFzXCDDytPlgfb1HWV/Q828sErYbMsfg00MC7NqzaEnnj/UN0RV7yoc/I4Ce/7f0Qjoq5++HbqklFcRGbQwjY3cQChM0xwcWBL0eQRw7iey2WAXMVEbS6bhj1xonnFWQA7hG6Z5D1GasrnchOb95HCytoU83HcfU2A==;
h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=05469e6f8b.nxcli.io; h=
to:subject:date:from:message-id:mime-version:content-type
:content-transfer-encoding; s=default; bh=zmpil5mFFPQOqyJNeCNJTQ
L36QOiE1aQHmKDgPJitsU=; b=Y/kROx03ApR0zdW372cKc51Ly6iv6qgaUPpRm8
ieXIBDZBgWyJPtcY1FAvlsrvB7v91+tLuv0vl2Rkxk663ECJaSg4V8cJs3nOvpm/
WOM7Y/yJ3wV30HJXIlBlidmxA50T9+FCyFomPGJrRyONaj3PXc2GJOyPCXJ9amJQ
Xfjmcv2jZ27wmHbu1ktZ2EuleR9PY7xKIduOUkTqNuqn94vxENWepA+0hlj0aAlw
sBUJWprsZe+SauIq4dQ6e3J4tF6s4s0vduizZHffhbhoTgMi1ItrLcTqEeKZ6Ecy
N36lDd1sTuZfY4+4WqPBo/aMtZYLVfTP/kGhKwnp73uHZ1NA==
Received: (qmail 6347 invoked by uid 10185); 9 Nov 2026 04:44:54 +0000
To: root@nk.ca
Subject: YOUR ENTERTAINMENT DESERVES MORE!
X-PHP-Originating-Script: 10185:yo.php
Date: Mon, 9 Nov 2026 04:44:54 +0000
From: Scanflick Customer Support
Message-ID: <6ae8969a599491a41c6bd63c188ed6ad@05469e6f8b.nxcli.io>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_6ae8969a599491a41c6bd63c188ed6ad"
Content-Transfer-Encoding: 8bit
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SCANFLICK - Your Entertainment Deserves More SCANFLICK
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
[209.87.158.171 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
[209.87.158.171 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.87.158.171 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: scanflick.com]
0.0 URIBL_RED Contains an URL listed in the URIBL redlist
[URI: scanflick.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.87.158.171 listed in bl.score.senderscore.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} YOUR ENTERTAINMENT DESERVES MORE!
This is a multi-part message in MIME format.
--b1_6ae8969a599491a41c6bd63c188ed6ad
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
SCANFLICK - Your Entertainment Deserves More
SCANFLICK
PREMIUM ENTERTAINMENT EXPERIENCE
YOUR ENTERTAINMENT DESERVES MORE!
Welcome to SCANFLICK – Where Entertainment Meets Incredible Value!
Are you tired of spending too much money on different entertainment subscriptions?
Imagine enjoying a huge variety of entertainment without having to pay for multiple services separately!
With SCANFLICK, you can discover an entertainment experience that brings more variety, convenience, and value to your everyday viewing.
✨ WHAT MAKES US DIFFERENT?
Thousands of live TV channels from around the world.
A wide selection of movies and TV series.
Sports, live events, and entertainment.
A variety of popular entertainment content.
Support for multiple devices.
Affordable subscription plans.
Friendly customer support.
🎠FREE 24-HOUR TRIAL
Try our service before subscribing and discover what SCANFLICK has to offer!
MORE ENTERTAINMENT. LESS SPENDING.
Why settle for less when you can explore more entertainment at an affordable price?
VISIT OUR WEBSITE
Start your FREE 24-HOUR TRIAL today!
SCANFLICK TEAM
Your Entertainment. Your Savings. Your Experience.
scanflick.com
--b1_6ae8969a599491a41c6bd63c188ed6ad
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
--b1_6ae8969a599491a41c6bd63c188ed6ad--