-
3 Attachment(s)
Another scam?
I have a number of Microsoft products and receive monthly emails from them re their rewards system.
got this one today.
Attachment 481929
Looks exactly like the others but when I click on it, I get this.
Attachment 481928
This is the the email address of the sender
Attachment 481931
-
any idea what time you tried clicking the link?
microsoftrewards.com is a legitimate domain and appears to be registered correctly to Microsoft.
I'm calling it safe at this stage - if you're happy to PM me the direct link that I can look at I'll take a deeper look at why that warning may have come up.
The reason for asking about times: there were some issues on Microsoft authentication properties today, and this may have been a consequence of that... Most impacts were remediated before midday, but it was still active at ~10:30am. If you saw this then, you may not see it now.
-
1 Attachment(s)
Thanks for the reply. Yes, I did hear about the Microsoft downtime today.
However I still get the warning, even now if I click the email anywhere.
I clicked on more detail and got this screen
Attachment 481946
-
ah so that now makes sense what Safari is telling you. The certificate is one day from expiry and is probably a GMT vs AEST time zone thing. The cert is valid except it's now expired. So I would be comfortable to click a link.
The certificate is issued to pages.email3.bing.com (a genuine MSFT property) and it'll get refreshed soon so these warnings won't get prompted....
-
Ive seen a few expired certs recently - big names too.
The new Firefox is checking to ensure the certs are now the "more secure" V3 certificates. The older V1 and 2's produce a warning.
There really is no excuse for this. Sloppy webmastering.
On another matter, I've been using the new Cloudflare VPN BETA - its the bees knees - Its free, fast and adds all this security mumbo in automatically. One also gets a choice of DNS - standard, Malware and Family/Malware. The Malware is obvious. The Family keeps out pr0n and unwholsome domains, and the Malware.
Its not a guarantee of perfect happiness, but I'd say after using CF for a few years now that they are the kings of Knowing Everything as far as traffic, destinations and scam origination.
Of course one can turn it on and off as needed.
There are a few options. If you're inclined, check it out - its interesting regardless - 1.1.1.1 — The free app that makes your Internet faster.
Edit - Here is a good writeup - Cloudflare Warp: beta clients for Windows and Mac are now available - gHacks Tech News
-
All good now. Click on the email and it goes to Micro$haft and it’s rewards scheme.