General questions

Phishing attempt

Looks like somehow my email was obtained and used in (a terrible) phishing attempt:

Delivered-To: <my-email>
Received: by 10.36.64.86 with SMTP id n83csp3088427ita;
Thu, 6 Oct 2016 01:07:08 -0700 (PDT)
X-Received: by 10.28.175.147 with SMTP id y141mr12330073wme.9.1475741228902;
Thu, 06 Oct 2016 01:07:08 -0700 (PDT)
Return-Path: <robert+caf_=<my-email>>
Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com. [2a00:1450:400c:c09::22b])
by mx.google.com with ESMTPS id ke3si10477149wjb.240.2016.10.06.01.07.08
for <<my-email>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 06 Oct 2016 01:07:08 -0700 (PDT)
Received-SPF: neutral (google.com: 2a00:1450:400c:c09::22b is neither permitted nor denied by best guess record for domain of robert+caf_=<my-email>) client-ip=2a00:1450:400c:c09::22b;
Authentication-Results: mx.google.com;
dkim=pass header.i=@freshdesk.com;
spf=neutral (google.com: 2a00:1450:400c:c09::22b is neither permitted nor denied by best guess record for domain of robert+caf_=<my-email>) smtp.mailfrom=robert+caf_=<my-email>
Received: by mail-wm0-x22b.google.com with SMTP id k125so260552238wma.1
for <<my-email>>; Thu, 06 Oct 2016 01:07:08 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:delivered-to:dkim-signature:date:from:reply-to
:to:message-id:subject:mime-version:content-transfer-encoding
:sent-on:auto-submitted:account-id:ticket-id:type;
bh=ADj97+mQpEU+Mclql35TQaOz2TP6F65h6IW+paJCgGk=;
b=FUFL7T06H3UzLs3ixG7nt1LGq34J5fT6FefLD1iCrU+vW0q8UKsIquSjPr/G7YV9/2
JDkhlWJbXd3uhGaHYklpxRfjkziCIHvvxm2oRDJlaFBUNxKRdAZsPwCjSytq/nyNkUfM
0Ow49cPDEPPKFq3w0pl9RikYBKTtcGKOklPUdBCgfGdOn0CYa6wPSMKEeoZ+02CM6DOx
J2FnWooBl+RZwYwu/mdrD+Z6G6FKvvMxluRYGWknQoTKs8UxqiYtz803kg1OBxsGJui8
1sdaEy6b3dpKGz2cvaJXd5ONL6VDgiJ/WCG+sQAAkeTTlcYESYCxiN5cunhVBCSbN77L
HBSQ==
X-Gm-Message-State: AA6/9RlclKoXstbjb+cHzkCGrvOMgEw0B0JygVm3g8FgcydbOx0+EqZ909rf22/WlUxoou5AvKokVBae4dqP2fvzLkRRctA=
X-Received: by 10.194.238.42 with SMTP id vh10mr10746191wjc.111.1475741228484;
Thu, 06 Oct 2016 01:07:08 -0700 (PDT)
X-Forwarded-To: <my-email>
X-Forwarded-For: <my-email> <my-email>
Delivered-To: <my-email>
Received: by 10.194.93.36 with SMTP id cr4csp3180295wjb;
Thu, 6 Oct 2016 01:07:07 -0700 (PDT)
X-Received: by 10.66.173.110 with SMTP id bj14mr20101776pac.51.1475741227276;
Thu, 06 Oct 2016 01:07:07 -0700 (PDT)
Return-Path: <bounces+2329044-2d6e-robert=gradem.io@email.freshdesk.com>
Received: from o3.email.freshdesk.com (o3.email.freshdesk.com. [167.89.33.2])
by mx.google.com with ESMTPS id zy2si11620508pac.22.2016.10.06.01.07.06
for <<my-email>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 06 Oct 2016 01:07:07 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounces+2329044-2d6e-robert=<my-email>email.freshdesk.com designates 167.89.33.2 as permitted sender) client-ip=167.89.33.2;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=freshdesk.com; h=from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; s=smtpapi; bh=jYhM06tXeFus12maFbuDM0RmBCw=; b=iFvV0o0itNpcOcpfrj 4Cur7fjThbcAVzyjWxinWmqMMBndmb0RvZ28L5AUVNmrFBW+ALqLEbjrleYeG1ZQ QAvLLZSsyQQSoaFoQ0eMJacrkuMOCZfxRmah8LuPRaMLXQI2uLz+Sc6h3wbr3Fjd oKjnfch5cZwhSZpw9RlYy5AZ0=
Received: by filter0969p1mdw1.sendgrid.net with SMTP id filter0969p1mdw1.28526.57F6062948
2016-10-06 08:07:05.991737536 +0000 UTC
Received: from freshdesk.com (ec2-52-7-252-72.compute-1.amazonaws.com [52.7.252.72]) by ismtpd0003p1iad1.sendgrid.net (SG) with ESMTP id skshrddUR3OYCSx0wAyHMQ for <<my-email>>; Thu, 06 Oct 2016 08:07:06.004 +0000 (UTC)
Date: Thu, 06 Oct 2016 08:07:05 +0000
From: myscript <support@myscript.freshdesk.com>
Reply-To: myscript <support@myscript.freshdesk.com>
To: <my-email>
Message-ID: <57f60629ea677_74191797c19508623@active-jobs-13.mail>
Subject: MyScript Support user activation
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=--==_mimepart_57f60629e77fc_74191797c195085ea; charset=UTF-8
Content-Transfer-Encoding: 7bit
sent-on: 2016-10-06 09:07:05 +0100
Auto-Submitted: auto-generated
X-Auto-Response-Suppress: DR, RN, OOF, AutoReply
Account-Id:
Ticket-Id:
Type:
X-SG-EID: vZ+QuBQz1cqIIXMGfI44AetHd9P6rQepAVpaoRfmjsUK1Cb6sSWewB1oPyHroi8ehQVgnAAM07YAyz QXDqY2X4TGkA/l5y80C1YjxCL6UTLRxKtgDDK+ZJHIk0t4JXGHJDLho1c4NXt3c30niHw90A/q+wM4 Jn26V5byR/n8abgqJdPBQTFnKM7OJ8kmyz/45uhKxmXQknczvm1tu/w0ynp6VW3twW2ABg576TLqef 4=
X-SG-ID: 07jdBcxxKzkTTnSHcra6oBi7iIKZgviaTdzLqN06YS9xrhsJkjolhePiGZ6zEqywTus+luxQXQbqDb SmP+kzSA==

----==_mimepart_57f60629e77fc_74191797c195085ea
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Hi Robert L, A new MyScript Support account has been created for you. Click the url below to activate your account and select a password!

<br/>

</div>
----==_mimepart_57f60629e77fc_74191797c195085ea--

1 Comment

Dear Robert,

thank you for contacting us.

Currently, do not take this email into account. Indeed, this email was sent due to an internal error (and it is therefore not a Phishing attempt).

Please accept our apologies for this.

Best regards,

Olivier

Login or Signup to post a comment