Page 1 of 2 12 LastLast
  1.    18 Apr 2017 #1
    Join Date : Dec 2013
    Portsmouth Hampshire
    Posts : 1,830
    Windows 10 x86 14383 Insider Pro and Core 10240

    Is this a scam?? -


    Click image for larger version. 

Name:	2017_04_18_06_57_321.png 
Views:	5 
Size:	40.2 KB 
ID:	130665

    Not replied to this of course, since I am not "member@hotmail.com". Does anyone else have this? I don't use Outlook as such - just webmail in my browser.

    Seems like a phishing scam trying to get me to expose my email address?
      My ComputersSystem Spec
  2.    18 Apr 2017 #2
    Join Date : Mar 2017
    Posts : 67
    Win10 Pro x64

    can you reveal the URL in the "cancel & stop action now" by right clicking it ?
    it sure appears to be a phishing attempt to me but im curious to learn whats under the hyperlink.
      My ComputerSystem Spec
  3.    18 Apr 2017 #3
    Join Date : Feb 2015
    Bamberg Germany
    Posts : 17,643
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu

    Quote Originally Posted by Fafhrd View Post
    Click image for larger version. 

Name:	2017_04_18_06_57_321.png 
Views:	5 
Size:	40.2 KB 
ID:	130665

    Not replied to this of course, since I am not "member@hotmail.com". Does anyone else have this? I don't use Outlook as such - just webmail in my browser.

    Seems like a phishing scam trying to get me to expose my email address?
    See if you can go to the online version of outlook and mouse over the link to see where it goes,
    Click image for larger version. 

Name:	Image 001.png 
Views:	4 
Size:	34.5 KB 
ID:	130667

    or right click/ copy the link, and check the URL at VirusTotal - Free Online Virus, Malware and URL Scanner
      My ComputersSystem Spec
  4.    18 Apr 2017 #4
    Join Date : Dec 2013
    Portsmouth Hampshire
    Posts : 1,830
    Windows 10 x86 14383 Insider Pro and Core 10240
    Thread Starter

    Yes, it will be in the message source (codebox below) - I'm not going to risk clicking (right or left!) the return link! I'm overcautious like that!


    Code:
    Received: from LOXP123CA0003.GBRP123.PROD.OUTLOOK.COM (10.166.247.10) by LO1P12301MB1522.GBRP123.PROD.OUTLOOK.COM (10.167.30.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10 via Mailbox Transport; Tue, 18 Apr 2017 04:20:29 +0000Received: from inbound.mail.protection.outlook.com (213.199.180.180) by LOXP123CA0003.outlook.office365.com (10.166.247.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10 via Frontend Transport; Tue, 18 Apr 2017 04:20:29 +0000Received: from HE1EUR02FT013.eop-EUR02.prod.protection.outlook.com (10.152.10.56) by HE1EUR02HT037.eop-EUR02.prod.protection.outlook.com (10.152.11.189) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 04:20:29 +0000Authentication-Results: spf=pass (sender IP is 40.92.72.97) smtp.mailfrom=hotmail.com; hotmail.com; dkim=pass (signature was verified) header.d=hotmail.com;hotmail.com; dmarc=pass action=none header.from=hotmail.com;Received-SPF: Pass (protection.outlook.com: domain of hotmail.com designates 40.92.72.97 as permitted sender) receiver=protection.outlook.com; client-ip=40.92.72.97; helo= EUR03-VE1-obe.outbound.protection.outlook.com;Received: from SNT004-MC11F11.hotmail.com (10.152.10.53) by HE1EUR02FT013.mail.protection.outlook.com (10.152.10.93) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 04:20:28 +0000X-IncomingTopHeaderMarker: OriginalChecksum:DD91BA5FA683E8A1799314C14E019F1068B3EF3E13216C654A8440D6DB7F9338;UpperCasedChecksum:1AB31E48F4F95D28A2664FE09F10B5075F798F8AFE112C6498A9179B0B69DFB0;SizeAsReceived:5438;Count:42Received: from EUR03-VE1-obe.outbound.protection.outlook.com ([40.92.72.97]) by SNT004-MC11F11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);     Mon, 17 Apr 2017 21:20:25 -0700DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZK1z58DHlVmu2XF3K/lBXBafpUmyGQdkzyMZCaqTdO4=; b=UbrwqNY6ejjY8s40PChqkonI3YFu62k1j44VN1cyg9m0P6cZ7n17QaA014xJazZ231UdoMXGpscpXa1XZW3qEiLMNrMy2FcG7S06pQah9KrjJCME3bENwH4nIBDm/0PpHkFQFQ5dnPGAWG7JkKeoyREtoKXcjeXZSVQFvi1aMoIU5oPAY3YUE4j0Xj61ZmGDYaX5gwZW0yMS+o5NxL+gSPvD8H8PUa/I0zKIccbv7gFP3pIlNSfaxARn3ue+1Q7Dy9KqmPODApnB75U+xxIdbnzyrbhyvsxoeKtUnqqRmNa/PrEPOa93qMkbj0khN4RhO5cg3a//fZ5ximV5NSCgQg==Received: from AM5EUR03FT020.eop-EUR03.prod.protection.outlook.com (10.152.16.55) by AM5EUR03HT093.eop-EUR03.prod.protection.outlook.com (10.152.17.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 04:20:04 +0000Received: from HE1PR08MB0604.eurprd08.prod.outlook.com (10.152.16.60) by AM5EUR03FT020.mail.protection.outlook.com (10.152.16.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 04:20:04 +0000Received: from HE1PR08MB0604.eurprd08.prod.outlook.com ([10.163.178.146]) by HE1PR08MB0604.eurprd08.prod.outlook.com ([10.163.178.146]) with mapi id 15.01.1034.013; Tue, 18 Apr 2017 04:20:04 +0000From: ACCOUNT UPDATE <vrftosato@hotmail.com>To: "member@hotmail.com" <member@hotmail.com>Subject: =?utf-8?B?4pyJ8J+UlCBFbWFpbCBBY2NvdW50IFN1c3BlbnNpb24=?=Thread-Topic: =?utf-8?B?4pyJ8J+UlCBFbWFpbCBBY2NvdW50IFN1c3BlbnNpb24=?=Thread-Index: AQHSt/nFDEYnJAECDE+HCXhR0GilwaHKhUZsDate: Tue, 18 Apr 2017 04:20:03 +0000Message-ID: <HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190@HE1PR08MB0604.eurprd08.prod.outlook.com>References: <HE1PR08MB060445DD3B03995CFEE145C0BF190@HE1PR08MB0604.eurprd08.prod.outlook.com>In-Reply-To: <HE1PR08MB060445DD3B03995CFEE145C0BF190@HE1PR08MB0604.eurprd08.prod.outlook.com>Accept-Language: en-GB, en-USContent-Language: en-GBX-MS-Has-Attach:X-MS-TNEF-Correlator:authentication-results: hotmail.com; dkim=none (message not signed) header.d=none;hotmail.com; dmarc=none action=none header.from=hotmail.com;x-incomingtopheadermarker: OriginalChecksum:11B959EB5AC6DEF1CC518E8498BC95E5619C5929A598F72BFD9622497BBC1493;UpperCasedChecksum:92F7E979E0366B420F3CDA6B1740C935A1E777E7A79D647A06B2D472701AABE5;SizeAsReceived:21306;Count:42x-ms-exchange-messagesentrepresentingtype: 1x-tmn: [+MYNI2i6EM7IZq5LP1OplTPZ9GqOpD6v]X-Microsoft-Exchange-Diagnostics-untrusted: 1;AM5EUR03HT093;5:si1fUxHub9FaViPzdHjsPNNGht+LI0eSZWwpNX/KGX7MS7ZeXmIVXBYrgo4XPcN9KwWgroDM/8CNbGH9wvI1VEIn/0c5D0xXrbnKy/cocUm3gOA2XA864+csL3Y4hGeljX4bEzJ5E6VqhzihrhSzaw==;24:nEzS/CkIQN4x+alJQgNz6fKg++KvcM/g6EFy8mEDnKGq79PQMsYnigij26oIHGz6wK+PW30be5Nvd7ANKvbospLaUdmZOWFw4bk7NG+iPKw=;7:XO25xJ7DxccyYX4Rj+VAVvLEHaqgJsD68gVhuLTKrNfAiBUQ9A6APb+2MkYVtGNZm4P1tbnIqkjgqtP7mgSVVuVc89PbnRM1Qe9FQYDU66igT/oY8rXB60HeZ83SKm1xockmepbFB/7nM1sz2DqOFqikzexZYMl5ec+bkErI+15QDuDYWKXU6/fu6E5MSHwIb5vQgsRz7zi4BTAeB9Qml6zisbMSd9qFe4pvHdQrHmCpQ2w/tEw25PBI6XakBEvnYOikIfRlruDja6sa40e5FU7ezo8R4VuTsWF7Rca4Fk2Xn38mi8y0pW9fHoGn/lBgx-incomingheadercount: 42x-eopattributedmessage: 1X-Forefront-Antispam-Report-Untrusted: EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:AM5EUR03HT093;H:HE1PR08MB0604.eurprd08.prod.outlook.com;FPR:;SPF:None;LANG:en;X-MS-Office365-Filtering-Correlation-Id: 624d2ceb-ba63-4a65-96ff-08d486123f11X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322274)(1603101448)(1601125374)(1701031045);SRVR:AM5EUR03HT093;x-ms-exchange-slblob-mailprops: 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x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:AM5EUR03HT093;BCL:0;PCL:0;RULEID:;SRVR:AM5EUR03HT093;BCL:0;PCL:0;RULEID:(444111366)(82015058);SRVR:HE1EUR02HT037;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT037;x-forefront-prvs: 028166BF91SpamDiagnosticOutput: 1:99SpamDiagnosticMetadata: NSPMContent-Type: multipart/alternative;    boundary="_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_"X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT093Return-Path: vrftosato@hotmail.comX-OriginalArrivalTime: 18 Apr 2017 04:20:25.0596 (UTC) FILETIME=[1A78BBC0:01D2B7FB]X-IncomingHeaderCount: 42X-MS-Exchange-Organization-Network-Message-Id: 624d2ceb-ba63-4a65-96ff-08d486123f11X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0X-MS-Exchange-Organization-MessageDirectionality: IncomingCMM-sender-ip: 40.92.72.97CMM-sending-ip: 40.92.72.97CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 40.92.72.97; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=vrftosato@hotmail.com; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=hotmail.com; x-hmca=pass header.id=vrftosato@hotmail.comCMM-X-SID-PRA: vrftosato@hotmail.comCMM-X-AUTH-Result: PASSCMM-X-SID-Result: PASSCMM-X-Message-Status: n:nCMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0wCMM-X-Message-Info: l9qkOyR/cpRVB4gl2jVpE1bymFCptcBg+N0sWZYjxsusoemdyTL7djIq9pe5J7ZHAY9FxDO+3X2RI2dIIDWRjWKXO1meO/44RyZ4V4WE4s3E8ryOMQCcAoWpLSZW1dze/ljTcQnm9uwvXuGoffBtCNU524zq0Sk4iAVSBF3n1BzPoQbB/l1pdWwZxdmeEiT+M0/2Yfb3IE/HkHOC4oKfaH5EJw4mc6kDQn02E8fm0HgHYSCFUYlu6IRizzIEhUh7X-MS-Exchange-Organization-PCL: 2X-MS-Exchange-Transport-CrossTenantHeadersStripped: HE1EUR02FT013.eop-EUR02.prod.protection.outlook.comX-Microsoft-Exchange-Diagnostics: 1;HE1EUR02FT013;1:cOaA8/cN52W4owVN26nFk9PZyT/SO5hvHx6ggbNjM9XKMUSuIGWxL8MRFS/VCbSkFLTIdvWoUPJMh/sYbcYN8t81nt3jKa8GbAEBAlyOgJZtdMUdEm7zCDr3E4cDSl70UhZpNffDzrErwlTZNqMS1KzkzBLLYKSWWUliQMbSFwYHJuvZvJ1CvPYpkB/7hpNWX-Forefront-Antispam-Report: EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:HE1EUR02HT037;H:SNT004-MC11F11.hotmail.com;FPR:;SPF:None;LANG:en;X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:HE1EUR02HT037;X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;3:JODnwp38AoNzhfbOiTLsOWPQrqQEwjlvuF69jZzWegRbnGtDkUWcQSvxLhiT1B6NuAez5C4KgQ6rsc4WrXRMENI2c13MlvkUpfRF15oO/+vUjUty+8/vMfBgNg15Ko/wKHobImW0qHTMCJz5zIu5eil52gaJM0vnJbjhyTBbIDUFIGW9RIrSb4w/GJp8uuEolA3lhXbKhxM3Y6h5b8L9l2ptJ98g68k4fMFHsqRBwTbnUNeeUNESpaWuVKaeWgWZTJKKP91Gbrk0Wqgu4utHXYzvwEKTHgnrEtIBkLSgK5ECxd4ozZ/JwYAsS47X7muaLuFmyVnIZaSZvNOnL+X6AEM0gv5MD7uxZ8UMcqbX3NQLYrPEP/1JWBMtpbG4lJOa;25:6kCGnMIix3arYu7CrVgUvrbETjfossoAxukDadPcY5+hx61WkDItnMMZO6AQfdXh6DMJYs5cnnS6e8+FtsziSmE5z1Zj82+8yPel9uy4ZIq9CzDIOizkOZZJvxiJcTaWLWfGi7G4oe64iD4dvSYoH3iBGWMBcphSC1HEsjlGTe8W/zZexWFyPUE6NDhcMdqgdH/jHh4I4lI1Rp2akvg/lZdsttgiRas0Az0bHpZeSLwGHd/1Sjqq7uIq13Xe51jJyv87FDKU4J49NjmOlO//uupOSIc0OmXl7hgF7p4VxGOggeZrrAhEtK0Sy40mpj7aWQJnDls695v44uMnrnzZc9z0LTrOxha+1P3iOueugrgaCQLRz8dS+77O8Ji6OtKilIgpNAdIYuLxf/uQCVEyB634YK/uzAr3DRLeArWaHQC41W5EvX07B5rpGLhCsLe5nWW0gq/RJuwVNQQXeixp39D6gGCpbJVGTjZB8J786EQ=X-MS-Exchange-Organization-AVStamp-Service: 1.0X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;31:C9HNzyCAaobVFXplTHXALFkBJX5l0ReP+vE4dRmMm5NM79zSEj2Q6TZd5xSjWo62un1uJUhrEt9l98kjVijDmIkhJXRwxDXMexlpGVxzkqn2Wh6Sj96t18GHBOOniMomy7tWksZ82cBPev2xJj0s12F37OLxWuQRHyv6gECZDBKVla0N/V0gONFRlGZWC2z+84Xvf9Jh0PZFJSXHLt8GqKlGX+8KGmvD9znoAB+N3jkCgIwzBSmzjl4mtt01PNCta4V+9CE0A9CT3JCkGyvE4M9OntI14b1h1BLA2VkttZveoDZzSh+qacDO2Lys27XXrnFELGQMw9oSpRAbLC1TdQ==;4:9GwLOVLRetGRZYg543U1ftphiFkt+oz9q6GvKSf1MGcM1y5UOcQ35S2LXlgav72B/e2wECqBTcnA1whYh39AeT6/gTaland6eDZC5sXeh6DKtY8rDiY8wHppMpfuchWrJRw6nrze9BxfS/CYRckaTzYscOZzlhTV5/e4xgMqJGGFKqhI+c4lQ40+lmx969gTezOB56n05DcfUMQ2Gk6PFQEe3kXztVer90uw6sBtQr1NG2ro7myMGvvpgIadrXOGEeRcFy0CZnZKgmoTLlcJxNhZTWH/iznuxdeTraCJFGUuAuQxJoJFqpYz4N+dq8r6;23:Rfr5LImaKT+PX9iNsouWRAh0C/Mcd0iUN3+lmUfitURuYu1hO2sTM4ndxfPvaGmX6hMaopdbJvzaYVuByDDDDfsbcmDNHW9I09WSvgM4X6gnrA9AG3jHDX+My8T2wFHWTLmS2E/KilPHYI+soTgqd3/fAIWlqmO0jylSgAgIC34=X-MS-Exchange-Organization-SCL: 1X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;6:7+kmUv9V5bnPvGt5t3QmyaGadO+y29icxDMB4q/oZq11MtvJssfTBFi8u5venp443pFvnvnfSJfy0oTdFCRdM5UDDlQLa0gvY93siyiIbi52QisNZ50Ks2uxmwe3FKinVw4oPCzIqt1HScnGgSFo6ta6CPFCl191+GjNcdVeDCEnxThgcFYXgyFZgY2A1qzooQuPYuDPany3bISaG6oNRB4Y/4zYH7UlKUIgA8FfvabrGts5aZA1c4RVWPIPJf7jxQB0S8763RH/YTZGHXC1tgNCQR9l7BwXZcJDPSACrfJFEfDca2lnlRrg9w79OCJr4V837r7Abtw0A0ak5wjH9h+eWQwnuWYl8dNrnZABXcrn28UMPtXpnXVBFBkOBJom0KbtKmF7Hg7X1Bf/KAfnOQ==;5:BH5a7stFPjlKA5a6YkmgEOtXF7rHx25Dto95F8yZHEmmpjYzl7X+35jJ1FFq6pzkNWTdtn6MzfwD8dWrOyT5wtWO44ubFIUI6Z+uin92Dc7SowPVuAueOK4FoO8wwgySMpnto4RB7gmtbjv7yZs4jA==;24:IuVEtQBM4oYADNdDi8Pu20sErx5pD0MmZkphxleLKq/of4qB6N7UOKfSDl4TqViF9/qR9eVBwfUB4XwuU7jYe7Yy5KHwvIqBeunjVOc8HMA=X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02HT037;7:Do4mL5F8kuGr/gmSMBSAt1A2disbC3AZbVe4MedHrHstExHx5RNdj7ATO0rvukZM2AqqAdcSnjhZeztfbkC5uBmGjO7PdFseanOGWPbOBuo0cQwUA/UYvZN9Iv0/5UtmcmdGnMc/k6vE+B9IKL4nnn4QAKmpd2Y1tyO7GLFHI6ZMtG0P+4IPEIarYADkc4yD3+JPnS2ilh7PcqhoBfqp90wt1NT1tb7jfYiOotMLKBPhf1gUBnjgBVCd6svdu/7oTjdp/7BUhfWi7/VLz17xCydWkRKy1yLMCCy1mmlviIOYAClMI7g+x5NMI8EnPg84gbd/cOsLAIDIbppkfgJNxw==X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Apr 2017 04:20:28.3451 (UTC)X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaaX-MS-Exchange-CrossTenant-FromEntityHeader: InternetX-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT037X-MS-Exchange-Organization-AuthSource: HE1EUR02FT013.eop-EUR02.prod.protection.outlook.comX-MS-Exchange-Organization-AuthAs: AnonymousX-OriginatorOrg: hotmail.comX-MS-Exchange-Transport-EndToEndLatency: 00:00:00.9657176X-Message-Flag: Flag for follow upX-Microsoft-Exchange-Diagnostics:    1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery:    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);MIME-Version: 1.0--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_Content-Type: text/plain; charset="utf-8"Content-Transfer-Encoding: base64X-Microsoft-Exchange-Diagnostics:    1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery:    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);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--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_Content-Type: text/html; charset="utf-8"Content-Transfer-Encoding: base64X-Microsoft-Exchange-Diagnostics:    1;LO1P12301MB1522;27:thyttgeTN1EsH+ECvgTc3KDDlS++eSh8lJCP+gMP3fjXuC1THz7Hocfm5r+B1rBONMuLTxW8fod79Y35uBWg8CmgxGGL3zG4VaFP5RNO5VG3HBwrNooFrnA0MROiBk81bywe6UEOc07zCUEaAcvOEg==X-Microsoft-Antispam-Mailbox-Delivery:    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:40.92.72.97;WIMS-SPF:hotmail%2ecom;WIMS-DKIM:hotmail%2ecom;WIMS-822:vrftosato%40hotmail%2ecom;WIMS-PRA:vrftosato%40hotmail%2ecom;WIMS-AUTH:PASS;ENG:(5061607094)(102400140);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--_000_HE1PR08MB0604BDF4CD4CD8FC0FDF449ABF190HE1PR08MB0604eurp_--

    sender 40.92.72.97 is based in Kansas? with presumably Eli Lilley & Company as ISP

    The (stop this action link) translates to [URL]http://bit.ly/2onbrpg[/URL]

    Virustotal runs clean:

    Click image for larger version. 

Name:	2017_04_18_07_45_521.png 
Views:	3 
Size:	124.2 KB 
ID:	130668
    Last edited by Fafhrd; 18 Apr 2017 at 02:46.
      My ComputersSystem Spec
  5.    18 Apr 2017 #5
    Join Date : Mar 2017
    Posts : 67
    Win10 Pro x64

    the email came from vrftosato@hotmail.com.
    its obviously a compromised Hotmail account used for nefarious purposes.
      My ComputerSystem Spec
  6.    18 Apr 2017 #6
    Join Date : Dec 2013
    Portsmouth Hampshire
    Posts : 1,830
    Windows 10 x86 14383 Insider Pro and Core 10240
    Thread Starter

    Quote Originally Posted by EliteData View Post
    the email came from vrftosato@hotmail.com.
    its obviously a compromised Hotmail account used for nefarious purposes.
    I guess whoever owned that account clicked on a link in an email...
      My ComputersSystem Spec
  7.    18 Apr 2017 #7
    Join Date : Mar 2017
    Posts : 67
    Win10 Pro x64

    Quote Originally Posted by Fafhrd View Post
    I guess whoever owned that account clicked on a link in an email...
    and took them to a page that appears genuine, entered their credentials.....
    the typical clever way to harvest verified emails for selling to advertisers purposes.
    by sending an email from a compromised account that appears genuine, including the link within the email, the harvester collects that email and verifies its genuine because the recipient entered their credentials from the link embedded from the previous email.
    now the harvester has a verified email and credentials that can be sold off to advertisers and black-hat thieves respectively, who can use them for additional nefarious purposes.
      My ComputerSystem Spec
  8.    18 Apr 2017 #8
    Join Date : Dec 2013
    Portsmouth Hampshire
    Posts : 1,830
    Windows 10 x86 14383 Insider Pro and Core 10240
    Thread Starter

    I assume it was a Phishing scam email.


    I just checked my email account on Sign in to your Microsoft account is still up and running 31/2 hours later.

    The email is in my junk folder, hopefully to be analysed by the MS antispam system whenever.

    Thanks for the replies folks. I hope someone is stopped from panicking by reading this thread, and not clicking the link.

    Marking this as solved.
      My ComputersSystem Spec
  9.    18 Apr 2017 #9
    Join Date : Mar 2017
    Posts : 67
    Win10 Pro x64

    ah, thanks for posting the link.
    that seems a bit strange, why go through all the trouble of making an email look so official only to have the hyperlink direct the recipient to a website to play board games
      My ComputerSystem Spec
  10.    18 Apr 2017 #10

    Hi there

    why on earth did you even THINK of opening the email.

    NEVER EVER open emails unless you KNOW who sent them and even then tread carefully.

    Again provided you always take backup of your data - even if the worst had happened you could simply restore.

    Also you can right mouse click without any problems. --simply disable internet connection so nothing can happen.

    Again --NEVER EVER even THINK of opening emails unless you are 100% sure you know where it came from -- e.g if you bought something from amazon you'll have an order ref - so if you get an email from amazon it will have the order ref in the title so that will be safe.

    If its from Banks, tax offices, local councils etc - it will 100% be a SCAM of some sort so delete without even opening it.

    @EliteData

    It's quite a common scam to send people to various sites for "Free this or that" with in tiny print that after x days you will be charged a monthly fee -- and when you try and cancel - you've guessed it -- there's no way to cancel online and they usually give some phone number at the opposite end of the planet you are expected to ring --of course also it's never manned.

    The only way is to get you bank to cancel any card you used and send a new one and block ANY money from the old card and your bank account.

    There's a load of these scams doing the rounds now so TAKE CARE, and if signing up for anything ALWAYS READ THE SMALL PRINT --don't get into click, click, click mode. !!!!

    Cheers
    jimbo
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Solved Malwarebytes Scam?
I just tried downloading the advertised 14-day free trial of their premium version, but during installation I get a pop-up window that says my 14 day trial has ended and then the installation stops. I think I'll keep using the free version (which...
AntiVirus, Firewalls and System Security
OT: Loveworm scam
Thought I'd report this incident, in case it's more widespread. My browser is Firefox and one of the many extensions is called Tab Mix Plus. I haven't visited the TMP Forum for a long time. (Maybe never on this new Win 10 PC which is now 10...
AntiVirus, Firewalls and System Security
What A Scam
I updated my windows 10 last night and had no problems getting online this morning. After running some errands, I returned and attempted to go online and got a message stating that my network was deemed unsafe by Microsoft and I needed to fix it...
AntiVirus, Firewalls and System Security
Solved scam but questions
Just received a phone call from someone with a thick eastern European accent stating he was from Windows 10 and that I had a problem with my computer, running slow, etc. He had my correct address. After asking me to run something that brought up the...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:14.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums