close

Dear Creators, we are proud to announce an amazing affiliate program for you to earn some serious and continual cash. Read about our affiliate progarm here.


Caros criadores, temos o orgulho de anunciar um incrível programa de afiliados para vocês ganharem muito dinheiro de forma contínua. Leia sobre nosso programa de afiliados aqui.

Up next

Autoplay

Scam email claims to be from Microsoft

29 Views • 04/04/23
Share
Embed
Download
KEEPER
KEEPER
371 Subscribers
371

A scam email making the rounds claims to from Microsoft, informing the recipient that there has been unusual sign-in activity on their account in Russia. <br> <br>Subscribe to WGAL on YouTube now for more: http://bit.ly/1lIwU2e <br> <br>Get more Susquehanna Valley news: http://www.wgal.com <br>Like us: http://www.facebook.com/wgal8 <br>Follow us: http://twitter.com/WGAL <br>Instagram: https://www.instagram.com/wgal8/

Show more
2 Comments sort Sort By
KEEPER
KEEPER 2 years ago  

I almost fell for the scam this morning, it came into my personal email, and I wasn't sure if I could trust the link even though it looked official, it's almost like you can't trust any email that comes your way these days because of shit like this.

If it looks like this, don't trust it, access your account from the main web page not through your email.
https://grabber.themetwally.co....m/media_attachments/

   0    0
Life_N_Times_of_Shane_T_Hanson

Open the email as a plain code - in full HTML.....

0
0
Life_N_Times_of_Shane_T_Hanson

Open the mail as PLAIN TEXT or some other description which shows only code, not an active HTML file

AND you will see legitimate consistencies in the too / from email address's and in the data in the code and in the links from the email to other sites - usually their own sites

I have stripped all the excess and persoally identifying info out of it...

Doing a "who is" is helpful - 10.98.212.170:41293 - then 10.98.212.170. - then ALDI.COM.AU


Delivered-To:
Received: by 2002:7 with SMTP id
Sun, 26 Mar 2023 16:02:45 -0700 (PDT)
X-Google-Smtp-Source: AK7

Sun, 26 Mar 2023
ARC-Seal:

ARC-Message-Signature:
ARC-Authentication-Results:

dkim=pass [email protected] header.s=aldisued header.b=XSOrtggB;
spf=pass (google.com: domain of [email protected] designates 63.140.41.181 as permitted sender)

[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=aldi.com.au
Return-Path: <[email protected]>

[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=aldi.com.au
Return-Path: <[email protected]>

DKIM-Signature

X-MSFBL:

Received: from [10.98.212.170] ([10.98.212.170:41293] helo=r180.em.aldi.com.au)
b
From: "ALDI Australia" <[email protected]>

Subject: On sale Wed 29 Mar - Home Health Care, Kitchen Essentials & Adult Fashion
Date: Mon, 27 Mar 2023 00:02:43 +0100

Reply-To: "ALDI Australia" <[email protected]>
MIME-Version: 1.0


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Basic Searches:


Domain:
aldi.com.au
Registrar:
Corporation Service Company (Aust) Pty Ltd
Updated On:
2023-02-08
Status:
ok
Name Servers:
udns2.cscdns.uk
udns1.cscdns.net




Raw Whois Data ====> ALDI.COM.AU

Domain Name: ALDI.COM.AU
Registry Domain ID: D407400000002443569-AU
Registrar WHOIS Server: whois.auda.org.au
Registrar URL: https://www.cscdigitalbrand.services
Last Modified: 2023-02-08T00:01:00Z
Registrar Name: Corporation Service Company (Aust) Pty Ltd
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8887802723
Reseller Name:
Status: ok https://afilias.com.au/get-au/....whois-status-codes#o
Registrant Contact ID: Y133447637147694
Registrant Contact Name: ALDI Stores A Limited Partnership
Tech Contact ID: 593622636789e167
Tech Contact Name: DNS Administrator
Name Server: UDNS2.CSCDNS.UK
Name Server: UDNS1.CSCDNS.NET
DNSSEC: unsigned
Registrant: ALDI FOODS PTY LIMITED
Registrant ID: ACN 086210139
Eligibility Type: Company

0
0
Life_N_Times_of_Shane_T_Hanson

It's the scammer emails that say "It's from Microsoft" and yet the link goes to "https:\\wanker.slutvision.net\ and things like that..... Or they have your email in the address and UNDISCLOSED recipients - like it's not just to YOU and only YOU, and the reply path - goes to some other site that is not microsoft and or to 20 other email adress's that are NOT microsoft email address -

0
0
Show more

Up next

Autoplay