New
#1
can you reveal the URL in the "cancel & stop action now" by right clicking it ?
it sure appears to be a phishing attempt to me but im curious to learn whats under the hyperlink.
See if you can go to the online version of outlook and mouse over the link to see where it goes,
or right click/ copy the link, and check the URL at VirusTotal - Free Online Virus, Malware and URL Scanner
Yes, it will be in the message source (codebox below) - I'm not going to risk clicking (right or left!) the return link! I'm overcautious like that!
Code:Received: from LOXP123CA0003.GBRP123.PROD.OUTLOOK.COM (10.166.247.10) by LO1P12301MB1522.GBRP123.PROD.OUTLOOK.COM (10.167.30.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10 via Mailbox Transport; Tue, 18 Apr 2017 04:20:29 +0000Received: from inbound.mail.protection.outlook.com (213.199.180.180) by LOXP123CA0003.outlook.office365.com (10.166.247.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10 via Frontend Transport; Tue, 18 Apr 2017 04:20:29 +0000Received: from HE1EUR02FT013.eop-EUR02.prod.protection.outlook.com (10.152.10.56) by HE1EUR02HT037.eop-EUR02.prod.protection.outlook.com (10.152.11.189) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 04:20:29 +0000Authentication-Results: spf=pass (sender IP is 40.92.72.97) smtp.mailfrom=hotmail.com; hotmail.com; dkim=pass (signature was verified) header.d=hotmail.com;hotmail.com; dmarc=pass action=none header.from=hotmail.com;Received-SPF: Pass (protection.outlook.com: domain of hotmail.com designates 40.92.72.97 as permitted sender) receiver=protection.outlook.com; client-ip=40.92.72.97; helo= EUR03-VE1-obe.outbound.protection.outlook.com;Received: from SNT004-MC11F11.hotmail.com (10.152.10.53) by HE1EUR02FT013.mail.protection.outlook.com (10.152.10.93) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 04:20:28 +0000X-IncomingTopHeaderMarker: OriginalChecksum:DD91BA5FA683E8A1799314C14E019F1068B3EF3E13216C654A8440D6DB7F9338;UpperCasedChecksum:1AB31E48F4F95D28A2664FE09F10B5075F798F8AFE112C6498A9179B0B69DFB0;SizeAsReceived:5438;Count:42Received: from EUR03-VE1-obe.outbound.protection.outlook.com ([40.92.72.97]) by SNT004-MC11F11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143); Mon, 17 Apr 2017 21:20:25 -0700DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZK1z58DHlVmu2XF3K/lBXBafpUmyGQdkzyMZCaqTdO4=; b=UbrwqNY6ejjY8s40PChqkonI3YFu62k1j44VN1cyg9m0P6cZ7n17QaA014xJazZ231UdoMXGpscpXa1XZW3qEiLMNrMy2FcG7S06pQah9KrjJCME3bENwH4nIBDm/0PpHkFQFQ5dnPGAWG7JkKeoyREtoKXcjeXZSVQFvi1aMoIU5oPAY3YUE4j0Xj61ZmGDYaX5gwZW0yMS+o5NxL+gSPvD8H8PUa/I0zKIccbv7gFP3pIlNSfaxARn3ue+1Q7Dy9KqmPODApnB75U+xxIdbnzyrbhyvsxoeKtUnqqRmNa/PrEPOa93qMkbj0khN4RhO5cg3a//fZ5ximV5NSCgQg==Received: from AM5EUR03FT020.eop-EUR03.prod.protection.outlook.com (10.152.16.55) by AM5EUR03HT093.eop-EUR03.prod.protection.outlook.com (10.152.17.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 04:20:04 +0000Received: from HE1PR08MB0604.eurprd08.prod.outlook.com (10.152.16.60) by AM5EUR03FT020.mail.protection.outlook.com (10.152.16.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 04:20:04 +0000Received: from HE1PR08MB0604.eurprd08.prod.outlook.com ([10.163.178.146]) by HE1PR08MB0604.eurprd08.prod.outlook.com ([10.163.178.146]) with mapi id 15.01.1034.013; Tue, 18 Apr 2017 04:20:04 +0000From: ACCOUNT UPDATE <vrftosato@hotmail.com>To: "member@hotmail.com" <member@hotmail.com>Subject: =?utf-8?B?4pyJ8J+UlCBFbWFpbCBBY2NvdW50IFN1c3BlbnNpb24=?=Thread-Topic: =?utf-8?B?4pyJ8J+UlCBFbWFpbCBBY2NvdW50IFN1c3BlbnNpb24=?=Thread-Index: AQHSt/nFDEYnJAECDE+HCXhR0GilwaHKhUZsDate: Tue, 18 Apr 2017 04:20:03 +0000Message-ID: <HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190@HE1PR08MB0604.eurprd08.prod.outlook.com>References: <HE1PR08MB060445DD3B03995CFEE145C0BF190@HE1PR08MB0604.eurprd08.prod.outlook.com>In-Reply-To: <HE1PR08MB060445DD3B03995CFEE145C0BF190@HE1PR08MB0604.eurprd08.prod.outlook.com>Accept-Language: en-GB, en-USContent-Language: en-GBX-MS-Has-Attach:X-MS-TNEF-Correlator:authentication-results: hotmail.com; dkim=none (message not signed) header.d=none;hotmail.com; dmarc=none action=none header.from=hotmail.com;x-incomingtopheadermarker: OriginalChecksum:11B959EB5AC6DEF1CC518E8498BC95E5619C5929A598F72BFD9622497BBC1493;UpperCasedChecksum:92F7E979E0366B420F3CDA6B1740C935A1E777E7A79D647A06B2D472701AABE5;SizeAsReceived:21306;Count:42x-ms-exchange-messagesentrepresentingtype: 1x-tmn: [+MYNI2i6EM7IZq5LP1OplTPZ9GqOpD6v]X-Microsoft-Exchange-Diagnostics-untrusted: 1;AM5EUR03HT093;5:si1fUxHub9FaViPzdHjsPNNGht+LI0eSZWwpNX/KGX7MS7ZeXmIVXBYrgo4XPcN9KwWgroDM/8CNbGH9wvI1VEIn/0c5D0xXrbnKy/cocUm3gOA2XA864+csL3Y4hGeljX4bEzJ5E6VqhzihrhSzaw==;24:nEzS/CkIQN4x+alJQgNz6fKg++KvcM/g6EFy8mEDnKGq79PQMsYnigij26oIHGz6wK+PW30be5Nvd7ANKvbospLaUdmZOWFw4bk7NG+iPKw=;7:XO25xJ7DxccyYX4Rj+VAVvLEHaqgJsD68gVhuLTKrNfAiBUQ9A6APb+2MkYVtGNZm4P1tbnIqkjgqtP7mgSVVuVc89PbnRM1Qe9FQYDU66igT/oY8rXB60HeZ83SKm1xockmepbFB/7nM1sz2DqOFqikzexZYMl5ec+bkErI+15QDuDYWKXU6/fu6E5MSHwIb5vQgsRz7zi4BTAeB9Qml6zisbMSd9qFe4pvHdQrHmCpQ2w/tEw25PBI6XakBEvnYOikIfRlruDja6sa40e5FU7ezo8R4VuTsWF7Rca4Fk2Xn38mi8y0pW9fHoGn/lBgx-incomingheadercount: 42x-eopattributedmessage: 1X-Forefront-Antispam-Report-Untrusted: EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:AM5EUR03HT093;H:HE1PR08MB0604.eurprd08.prod.outlook.com;FPR:;SPF:None;LANG:en;X-MS-Office365-Filtering-Correlation-Id: 624d2ceb-ba63-4a65-96ff-08d486123f11X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322274)(1603101448)(1601125374)(1701031045);SRVR:AM5EUR03HT093;x-ms-exchange-slblob-mailprops: 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x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:AM5EUR03HT093;BCL:0;PCL:0;RULEID:;SRVR:AM5EUR03HT093;BCL:0;PCL:0;RULEID:(444111366)(82015058);SRVR:HE1EUR02HT037;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT037;x-forefront-prvs: 028166BF91SpamDiagnosticOutput: 1:99SpamDiagnosticMetadata: NSPMContent-Type: multipart/alternative; boundary="_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_"X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT093Return-Path: vrftosato@hotmail.comX-OriginalArrivalTime: 18 Apr 2017 04:20:25.0596 (UTC) FILETIME=[1A78BBC0:01D2B7FB]X-IncomingHeaderCount: 42X-MS-Exchange-Organization-Network-Message-Id: 624d2ceb-ba63-4a65-96ff-08d486123f11X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0X-MS-Exchange-Organization-MessageDirectionality: IncomingCMM-sender-ip: 40.92.72.97CMM-sending-ip: 40.92.72.97CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 40.92.72.97; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=vrftosato@hotmail.com; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=hotmail.com; x-hmca=pass header.id=vrftosato@hotmail.comCMM-X-SID-PRA: vrftosato@hotmail.comCMM-X-AUTH-Result: PASSCMM-X-SID-Result: PASSCMM-X-Message-Status: n:nCMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0wCMM-X-Message-Info: l9qkOyR/cpRVB4gl2jVpE1bymFCptcBg+N0sWZYjxsusoemdyTL7djIq9pe5J7ZHAY9FxDO+3X2RI2dIIDWRjWKXO1meO/44RyZ4V4WE4s3E8ryOMQCcAoWpLSZW1dze/ljTcQnm9uwvXuGoffBtCNU524zq0Sk4iAVSBF3n1BzPoQbB/l1pdWwZxdmeEiT+M0/2Yfb3IE/HkHOC4oKfaH5EJw4mc6kDQn02E8fm0HgHYSCFUYlu6IRizzIEhUh7X-MS-Exchange-Organization-PCL: 2X-MS-Exchange-Transport-CrossTenantHeadersStripped: HE1EUR02FT013.eop-EUR02.prod.protection.outlook.comX-Microsoft-Exchange-Diagnostics: 1;HE1EUR02FT013;1:cOaA8/cN52W4owVN26nFk9PZyT/SO5hvHx6ggbNjM9XKMUSuIGWxL8MRFS/VCbSkFLTIdvWoUPJMh/sYbcYN8t81nt3jKa8GbAEBAlyOgJZtdMUdEm7zCDr3E4cDSl70UhZpNffDzrErwlTZNqMS1KzkzBLLYKSWWUliQMbSFwYHJuvZvJ1CvPYpkB/7hpNWX-Forefront-Antispam-Report: EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:HE1EUR02HT037;H:SNT004-MC11F11.hotmail.com;FPR:;SPF:None;LANG:en;X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:HE1EUR02HT037;X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;3:JODnwp38AoNzhfbOiTLsOWPQrqQEwjlvuF69jZzWegRbnGtDkUWcQSvxLhiT1B6NuAez5C4KgQ6rsc4WrXRMENI2c13MlvkUpfRF15oO/+vUjUty+8/vMfBgNg15Ko/wKHobImW0qHTMCJz5zIu5eil52gaJM0vnJbjhyTBbIDUFIGW9RIrSb4w/GJp8uuEolA3lhXbKhxM3Y6h5b8L9l2ptJ98g68k4fMFHsqRBwTbnUNeeUNESpaWuVKaeWgWZTJKKP91Gbrk0Wqgu4utHXYzvwEKTHgnrEtIBkLSgK5ECxd4ozZ/JwYAsS47X7muaLuFmyVnIZaSZvNOnL+X6AEM0gv5MD7uxZ8UMcqbX3NQLYrPEP/1JWBMtpbG4lJOa;25:6kCGnMIix3arYu7CrVgUvrbETjfossoAxukDadPcY5+hx61WkDItnMMZO6AQfdXh6DMJYs5cnnS6e8+FtsziSmE5z1Zj82+8yPel9uy4ZIq9CzDIOizkOZZJvxiJcTaWLWfGi7G4oe64iD4dvSYoH3iBGWMBcphSC1HEsjlGTe8W/zZexWFyPUE6NDhcMdqgdH/jHh4I4lI1Rp2akvg/lZdsttgiRas0Az0bHpZeSLwGHd/1Sjqq7uIq13Xe51jJyv87FDKU4J49NjmOlO//uupOSIc0OmXl7hgF7p4VxGOggeZrrAhEtK0Sy40mpj7aWQJnDls695v44uMnrnzZc9z0LTrOxha+1P3iOueugrgaCQLRz8dS+77O8Ji6OtKilIgpNAdIYuLxf/uQCVEyB634YK/uzAr3DRLeArWaHQC41W5EvX07B5rpGLhCsLe5nWW0gq/RJuwVNQQXeixp39D6gGCpbJVGTjZB8J786EQ=X-MS-Exchange-Organization-AVStamp-Service: 1.0X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;31:C9HNzyCAaobVFXplTHXALFkBJX5l0ReP+vE4dRmMm5NM79zSEj2Q6TZd5xSjWo62un1uJUhrEt9l98kjVijDmIkhJXRwxDXMexlpGVxzkqn2Wh6Sj96t18GHBOOniMomy7tWksZ82cBPev2xJj0s12F37OLxWuQRHyv6gECZDBKVla0N/V0gONFRlGZWC2z+84Xvf9Jh0PZFJSXHLt8GqKlGX+8KGmvD9znoAB+N3jkCgIwzBSmzjl4mtt01PNCta4V+9CE0A9CT3JCkGyvE4M9OntI14b1h1BLA2VkttZveoDZzSh+qacDO2Lys27XXrnFELGQMw9oSpRAbLC1TdQ==;4:9GwLOVLRetGRZYg543U1ftphiFkt+oz9q6GvKSf1MGcM1y5UOcQ35S2LXlgav72B/e2wECqBTcnA1whYh39AeT6/gTaland6eDZC5sXeh6DKtY8rDiY8wHppMpfuchWrJRw6nrze9BxfS/CYRckaTzYscOZzlhTV5/e4xgMqJGGFKqhI+c4lQ40+lmx969gTezOB56n05DcfUMQ2Gk6PFQEe3kXztVer90uw6sBtQr1NG2ro7myMGvvpgIadrXOGEeRcFy0CZnZKgmoTLlcJxNhZTWH/iznuxdeTraCJFGUuAuQxJoJFqpYz4N+dq8r6;23:Rfr5LImaKT+PX9iNsouWRAh0C/Mcd0iUN3+lmUfitURuYu1hO2sTM4ndxfPvaGmX6hMaopdbJvzaYVuByDDDDfsbcmDNHW9I09WSvgM4X6gnrA9AG3jHDX+My8T2wFHWTLmS2E/KilPHYI+soTgqd3/fAIWlqmO0jylSgAgIC34=X-MS-Exchange-Organization-SCL: 1X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;6:7+kmUv9V5bnPvGt5t3QmyaGadO+y29icxDMB4q/oZq11MtvJssfTBFi8u5venp443pFvnvnfSJfy0oTdFCRdM5UDDlQLa0gvY93siyiIbi52QisNZ50Ks2uxmwe3FKinVw4oPCzIqt1HScnGgSFo6ta6CPFCl191+GjNcdVeDCEnxThgcFYXgyFZgY2A1qzooQuPYuDPany3bISaG6oNRB4Y/4zYH7UlKUIgA8FfvabrGts5aZA1c4RVWPIPJf7jxQB0S8763RH/YTZGHXC1tgNCQR9l7BwXZcJDPSACrfJFEfDca2lnlRrg9w79OCJr4V837r7Abtw0A0ak5wjH9h+eWQwnuWYl8dNrnZABXcrn28UMPtXpnXVBFBkOBJom0KbtKmF7Hg7X1Bf/KAfnOQ==;5:BH5a7stFPjlKA5a6YkmgEOtXF7rHx25Dto95F8yZHEmmpjYzl7X+35jJ1FFq6pzkNWTdtn6MzfwD8dWrOyT5wtWO44ubFIUI6Z+uin92Dc7SowPVuAueOK4FoO8wwgySMpnto4RB7gmtbjv7yZs4jA==;24:IuVEtQBM4oYADNdDi8Pu20sErx5pD0MmZkphxleLKq/of4qB6N7UOKfSDl4TqViF9/qR9eVBwfUB4XwuU7jYe7Yy5KHwvIqBeunjVOc8HMA=X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;7:Do4mL5F8kuGr/gmSMBSAt1A2disbC3AZbVe4MedHrHstExHx5RNdj7ATO0rvukZM2AqqAdcSnjhZeztfbkC5uBmGjO7PdFseanOGWPbOBuo0cQwUA/UYvZN9Iv0/5UtmcmdGnMc/k6vE+B9IKL4nnn4QAKmpd2Y1tyO7GLFHI6ZMtG0P+4IPEIarYADkc4yD3+JPnS2ilh7PcqhoBfqp90wt1NT1tb7jfYiOotMLKBPhf1gUBnjgBVCd6svdu/7oTjdp/7BUhfWi7/VLz17xCydWkRKy1yLMCCy1mmlviIOYAClMI7g+x5NMI8EnPg84gbd/cOsLAIDIbppkfgJNxw==X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Apr 2017 04:20:28.3451 (UTC)X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaaX-MS-Exchange-CrossTenant-FromEntityHeader: InternetX-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT037X-MS-Exchange-Organization-AuthSource: HE1EUR02FT013.eop-EUR02.prod.protection.outlook.comX-MS-Exchange-Organization-AuthAs: AnonymousX-OriginatorOrg: hotmail.comX-MS-Exchange-Transport-EndToEndLatency: 00:00:00.9657176X-Message-Flag: Flag for follow upX-Microsoft-Exchange-Diagnostics: 1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);MIME-Version: 1.0--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_Content-Type: text/plain; charset="utf-8"Content-Transfer-Encoding: base64X-Microsoft-Exchange-Diagnostics: 1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);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--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_Content-Type: text/html; charset="utf-8"Content-Transfer-Encoding: base64X-Microsoft-Exchange-Diagnostics: 1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);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--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_--
sender 40.92.72.97 is based in Kansas? with presumably Eli Lilley & Company as ISP
The (stop this action link) translates to[URL]http://bit.ly/2onbrpg[/URL]
Virustotal runs clean:
Last edited by Fafhrd; 18 Apr 2017 at 02:46.
the email came from vrftosato@hotmail.com.
its obviously a compromised Hotmail account used for nefarious purposes.
and took them to a page that appears genuine, entered their credentials.....
the typical clever way to harvest verified emails for selling to advertisers purposes.
by sending an email from a compromised account that appears genuine, including the link within the email, the harvester collects that email and verifies its genuine because the recipient entered their credentials from the link embedded from the previous email.
now the harvester has a verified email and credentials that can be sold off to advertisers and black-hat thieves respectively, who can use them for additional nefarious purposes.
I just checked my email account on Sign in to your Microsoft account is still up and running 31/2 hours later.
The email is in my junk folder, hopefully to be analysed by the MS antispam system whenever.
Thanks for the replies folks. I hope someone is stopped from panicking by reading this thread, and not clicking the link.
Marking this as solved.
ah, thanks for posting the link.
that seems a bit strange, why go through all the trouble of making an email look so official only to have the hyperlink direct the recipient to a website to play board games
Hi there
why on earth did you even THINK of opening the email.
NEVER EVER open emails unless you KNOW who sent them and even then tread carefully.
Again provided you always take backup of your data - even if the worst had happened you could simply restore.
Also you can right mouse click without any problems. --simply disable internet connection so nothing can happen.
Again --NEVER EVER even THINK of opening emails unless you are 100% sure you know where it came from -- e.g if you bought something from amazon you'll have an order ref - so if you get an email from amazon it will have the order ref in the title so that will be safe.
If its from Banks, tax offices, local councils etc - it will 100% be a SCAM of some sort so delete without even opening it.
@EliteData
It's quite a common scam to send people to various sites for "Free this or that" with in tiny print that after x days you will be charged a monthly fee -- and when you try and cancel - you've guessed it -- there's no way to cancel online and they usually give some phone number at the opposite end of the planet you are expected to ring --of course also it's never manned.
The only way is to get you bank to cancel any card you used and send a new one and block ANY money from the old card and your bank account.
There's a load of these scams doing the rounds now so TAKE CARE, and if signing up for anything ALWAYS READ THE SMALL PRINT --don't get into click, click, click mode. !!!!
Cheers
jimbo