dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
562
Brian3527
join:2002-07-08
Riverside, CA

1 edit

Brian3527

Member

Email validation?

Hi dslx team. I received an odd email overnight, and am curious of its validity. I have never seen such an email asking me to click a link to verify my email address in my 10 years of being a customer before. We all know about the security risks of clicking links in emails, especially those unsolicited.

Dear Subscriber,

We shall be carrying out service maintenance on our database and e-mail
account center for better Online services efficiency. In order to ensure
you do not experience service interruptions/possible deactivation.

Please Click the Link Below to Validate Your Mailbox.
https :// securehost. seamlessdocs. com (truncated to hide full address)

Failure to do this will immediately render your Web-email address
deactivated from our database.

Thanks
DSL Account-Support.
©1999-2015 DSL Extreme -
All Rights Reserved.
Brian3527

1 edit

Brian3527

Member

BTW, the email is from Karen Carpenter?? Furthermore, it was sent to only the main user name on my account. Would you even delete the main username on a account? None of my secondary addresses received the validation request.

sashwa
Mod
join:2001-01-29
Alcatraz

sashwa to Brian3527

Mod

to Brian3527
Looks like it's a phishing email to me.
Brian3527
join:2002-07-08
Riverside, CA

Brian3527

Member

That is what I am thinking sashwa. What is kind of making me think about it a little more though, is that I recently switched to TrueStream, and since those accounts are not serviced by DSLX the same way as traditional DSL, maybe this could be a valid request. But then again, I just can't believe they would resort to this method.

dslx_nick
ISP Employee
join:2011-12-24
Chatsworth, CA

dslx_nick

ISP Employee

Just checked and confirmed - yeah, that's totally phishing. Don't click on the link.
Brian3527
join:2002-07-08
Riverside, CA

Brian3527

Member

Thanks Nick. I didn't click it. I don't think I have had a phishing email get through Gmail like this before. There have been a few automatically caught and sent to my spam folder, but none like this. Thanks for the quick response!

dslx_nick
ISP Employee
join:2011-12-24
Chatsworth, CA

dslx_nick

ISP Employee

No problem. Thanks for the head's up! Most phishing emails get caught automatically as you noted, but looks like the system hasn't wizened up to this one yet. Up top there should be an option to click on to mark it as phishing - would suggest doing so with this email, to help alert the system so it catches any others.

NormanS
I gave her time to steal my mind away
MVM
join:2001-02-14
San Jose, CA
TP-Link TD-8616
Asus RT-AC66U B1
Netgear FR114P

NormanS to Brian3527

MVM

to Brian3527
Sam Spade tells me:

Sam Spade report.


He could say more with full headers.
Brian3527
join:2002-07-08
Riverside, CA

Brian3527

Member

Became very obvious this was a phishing attempt after seeing the full headers. A .edu add supposedly from DSLExtreme?? I reported it in Gmail as a phishing attempt.

Delivered-To: XXXXXXX@dslextreme.com
Received: by 10.140.31.246 with SMTP id f109csp192242qgf;
Sat, 24 Jan 2015 01:25:10 -0800 (PST)
X-Received: by 10.70.100.202 with SMTP id fa10mr12712184pdb.131.1422091510116;
Sat, 24 Jan 2015 01:25:10 -0800 (PST)
Return-Path:
Received: from exprod5og101.obsmtp.com (exprod5og101.obsmtp.com. [64.18.0.141])
by mx.google.com with SMTP id by8si2328765pab.69.2015.01.24.01.25.09
for ;
Sat, 24 Jan 2015 01:25:10 -0800 (PST)
Received-SPF: pass (google.com: domain of kcarpenter@coker.edu designates 64.18.0.141 as permitted sender) client-ip=64.18.0.141;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of kcarpenter@coker.edu designates 64.18.0.141 as permitted sender) smtp.mail=kcarpenter@coker.edu
Received: from mail-oi0-f41.google.com ([209.85.218.41]) (using TLSv1) by exprod5ob101.postini.com ([64.18.4.12]) with SMTP
ID DSNKVMNk9dKscaCfu68TNfSveSDA5Zwc6eN8@postini.com; Sat, 24 Jan 2015 01:25:09 PST
Received: by mail-oi0-f41.google.com with SMTP id z81so1237608oif.0
for ; Sat, 24 Jan 2015 01:25:09 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
bh=J2427bi/0RFPTopEG4WtUftHEgbscU/JKrWPJWjKpPg=;
b=m48MVcTqArPuUeH4Ki8f70TWGhbDYrPcd6cjTSVMS9EmOcr4JF69n1riXlXgrxry96
t6zhltTMJTEzY1o08olXZKXEEzg51IFWfTMwwSIY9j7jDDzgWz0/ATkB0eaWlYWEWF9e
f8xd6Emoy3ZiQqX2cdIm5TBHKfjJ4rJ3N2TKTg0iQoGpIbXMVYM/QBZNnmLZoUHKWGvw
aSH9hpmYXkqHSEGPsMY4Q+EuFpeROMer4NK+Nwp0Oq4mG3H3RW/PUuT1JWTKiiJaw7Rd
xDPQtLUYzixK7ve0FpKX9c/L0oTLYGcIGF3zIQV+5n4Vie8/x4LHrUNRZ9/GULCczblT
0Xig==
X-Gm-Message-State: ALoCoQl1WZkZ2bzFAfLzuwQeodED8DM8Bo8DKmlhe7aYHF5N+hd6fXa2m6ZzANqC9Q5+ivAXtmnJqMyMUFEVlw78+rABriORLoAn9wCedA5ytlgjJF5wK6rTCKrMJ0WfkLLH8fCoUAjoffJ5p5kFbzbQsfZw5hqqtA==
X-Received: by 10.202.201.194 with SMTP id z185mr6819374oif.32.1422091508995;
Sat, 24 Jan 2015 01:25:08 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.202.201.194 with SMTP id z185mr6819365oif.32.1422091508925;
Sat, 24 Jan 2015 01:25:08 -0800 (PST)
Received: by 10.76.73.169 with HTTP; Sat, 24 Jan 2015 01:25:08 -0800 (PST)
Date: Sat, 24 Jan 2015 11:25:08 +0200
Message-ID:
Subject: Dear DSL Extreme Subscriber,
From: Karen Carpenter
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Bcc: XXXXXXX@dslextreme.com

Dear Subscriber,

We shall be carrying out service maintenance on our database and e-mail
account center for better Online services efficiency. In order to ensure
you do not experience service interruptions/possible deactivation.

Please Click the Link Below to Validate Your Mailbox.
[Link removed. /sash]

Failure to do this will immediately render your Web-email address
deactivated from our database.

Thanks
DSL Account-Support.
=C2=A91999-2015 DSL Extreme -
All Rights Reserved.