cancel
Showing results for 
Search instead for 
Did you mean: 

Phishing/scam Email

Veeps
Hooked
Posts: 6
Thanks: 1
Fixes: 1
Registered: ‎06-11-2018

Phishing/scam Email

Hi Guys I have just received the following email which i suspect is part one of a 2 part scam. I haven't clicked any link in the email as they appear to be coming from @comm.plus.net. I've included the headers for you to have a look at .

Can you confirm this is in fact a scam email. Thanks

 

     
 

 

 

 

Username: [Removed]

 

 

 

 
 

Hello David

At Plusnet we believe in being honest, straight talking and doing right by our customers. We've recently become aware of a problem with your broadband, which means you have been set-up on the Unlimited Fibre (36Mbps average download speed) product rather than Unlimited Fibre Extra (66Mbps average download speed).

We will be working closely with our suppliers to correct this and to make sure you're getting the service you should be. The correction process will take around 10 working days to complete.

When your service switches over you may experience a small drop in connection. Usually this will happen overnight and your router will reconnect by itself. If it doesn't don't worry, you'll just need to restart your router by switching it off and back on again. If that doesn't help, please give us a call.

We will be refunding you for the difference in price for the product you've been getting and the product you should've been getting. Once all the changes have been made we'll calculate the refund you're due and send you an email to confirm the amount. The refund will be sent to you via cheque. This should arrive within one month of your service being changed over.

We're really sorry this has happened, but want to reassure you we're working on this as quickly as we can to get it fixed.

Any questions please give us a call on 0800 587 1901.

Best wishes,

The Plusnet Team

 
 
 

 

 

 

 
 
 

Click here to view this email in a new window

 
     
 
 

This email has been sent because it contains important information about your service from Plusnet. Please don’t reply to this email as it is from an unmonitored address.

 
 
 

Plusnet plc
Registered Office Address: The Balance, 2 Pinfold Street, Sheffield, S1 2GU
Registered in England, No: 3279013

 

 

 

 

Received: from VE1EUR01HT244.eop-EUR01.prod.protection.outlook.com
(2603:10a6:6:46::49) by DB6PR05MB4630.eurprd05.prod.outlook.com with HTTPS
via DB6PR01CA0072.EURPRD01.PROD.EXCHANGELABS.COM; Wed, 30 Jan 2019 18:06:16
+0000
Received: from VE1EUR01FT011.eop-EUR01.prod.protection.outlook.com
(10.152.2.60) by VE1EUR01HT244.eop-EUR01.prod.protection.outlook.com
(10.152.3.209) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1580.10; Wed, 30 Jan
2019 18:06:15 +0000
Authentication-Results: spf=pass (sender IP is 185.54.75.98)
smtp.mailfrom=comm.plus.net; hotmail.co.uk; dkim=pass (signature was
verified) header.d=msgfocus.com;hotmail.co.uk; dmarc=pass action=none
header.from=comm.plus.net;
Received-SPF: Pass (protection.outlook.com: domain of comm.plus.net designates
185.54.75.98 as permitted sender) receiver=protection.outlook.com;
client-ip=185.54.75.98; helo=mail75-98.int1.msgfocus.com;
Received: from mail75-98.int1.msgfocus.com (185.54.75.98) by
VE1EUR01FT011.mail.protection.outlook.com (10.152.2.229) with Microsoft SMTP
Server id 15.20.1580.10 via Frontend Transport; Wed, 30 Jan 2019 18:06:15
+0000
X-IncomingTopHeaderMarker: OriginalChecksum:86B99073802161AD75F12C7B0C19827C1F7CBEF419A824CC36F32CB0207E95A2;UpperCasedChecksum:6AB5E20D1FE01A8FDD773E7613B7E19921C6FF34D2417B2EF5E2168480EDCDD5;SizeAsReceived:1332;Count:12
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=msgf; d=msgfocus.com;
h=Subject:X-Mailer:Message-ID:Reply-To:To:List-Unsubscribe:From:Date:MIME-Version:Content-Type;
bh=4fcOZnhxdvdjqJu9HGBs0bM4JQI=;
b=wcY5BeGCRUgFO6svQc8+0S2lvqj5Kge9e8kgTDUtdagzVtJwgagX2g2hZ1zsWbuaIUewYKR9c2AE
0Uyf7o4D6aE7Zal+iv9Pf31Kjn1jOOY0p2lHMlPatl4tjc7wwc+yYWBVC2dyJzIyALynAD8BoflM
rcNvp/jb2tIXs1Y8cBQ=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comm.plus.net; s=msgf; t=1548871519;
bh=tqeNRg1sxXEyuMKsJqylkKssc7bud/ofKlcnHkc1fS0=;
h=Subject:X-Mailer:Message-ID:Reply-To:To:List-Unsubscribe:From:
Date:MIME-Version:Content-Type;
b=dxWi5DeW3ZF9Hu0Jg95jvGtX7Y+5K/ynNkq7WsjT8UMCWGEajW9T9RPLwZLW+aq4i
lopr2XXhRJs6xB77Fmtei3fwLrCS669PUgyDormsup24mu1ocLxrnBOEncPkGetLce
d3RCwY9l8gFJCudVI/P0qx7bYBGaljZgR+QzmreM=
Subject: Important information about your Plusnet account
X-Mailer: MessageFocus v2 launch
Message-ID: <4r9i1-75okbRaHT-njrQ-187vWXPgWkaFbw7Q@comm.plus.net>
Reply-To: Do Not Reply <autoemail@plus.net>
To: [Removed]@hotmail.co.uk
List-Unsubscribe: <mailto:mail.jrsurrwmuktlsperqn@comm.plus.net?subject=Unsubscribe>
From: Plusnet <plusnet@comm.plus.net>
Date: Wed, 30 Jan 2019 18:05:19 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="--19D193E16ECE2A96A29F251DDFF"
X-IncomingHeaderCount: 12
Return-Path: mail.jrsurrwmuktlsperqn@comm.plus.net
X-MS-Exchange-Organization-ExpirationStartTime: 30 Jan 2019 18:06:15.9527
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id: 1d5c943d-1a6b-4f83-2698-08d686dda095
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;VE1EUR01FT011;1:X/iffEB4igOaj7TkCp13NsM+y+wk4diVz/0oYmGTRghYFP0ydyyFGmg8FLwtDK5BGm+pJMyURi3P6pB3YudLBqGWx/wUoVAZiHmfGn5Jh0qnxoAWsj94UAvHqtkePhBWV+Rq2fe5VWfVFVJPaPiVqj1K1qP8axpjVu3lfrfECVU=
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
VE1EUR01FT011.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 1/30/2019 4:43:45 PM
X-MS-Office365-Filtering-Correlation-Id: 1d5c943d-1a6b-4f83-2698-08d686dda095
X-Microsoft-Antispam:
BCL:5;PCL:0;RULEID:(2390118)(5000110)(711020)(4605077)(610169)(640170)(650170)(8291501071);SRVR:VE1EUR01HT244;
X-Microsoft-Exchange-Diagnostics:
1;VE1EUR01HT244;3:d//N33YWv4+iPLYGSuCxNUCUXDWQ7M5tiMCAJ70YeJcmSGwV+tukdBmGeS3B2nl3iekc3TrnkpMuBs1DXI1f9mnLhRjlU74ZiK3iKRJsl4cQIy4Nv6dfez9u3TqaDbalSbcqG9+T2T6lR/x0dp8irfWh5bLUqto7/YBGk9Ye6SQPAtNUfLQR8B4B5Yca8FLnGyBHo+KYRKVx2v1/lSOUXOZgmLdZv5+v9GaV0+K6OZWCewNlyxvkZQLSQOeH3rAaonsB/fpL/lmBPN/jO/TYqGNoLPmryO0aA05dLYa7EavhfXKz2Oam7G2qmeHvT9OKn/nk1OZqlFBkbxMo49r/ISEvuZ0F93IsULuvnpItUsA=;25:rB227y6FUx52w8iU6Pmu2pOHvwMTdpXxeMz5xi0EMOCr/CWBbGV/tuHmXeA6426jfr76pdYoMw/ZcQP7JZlsbCsQcEj/1SwAspWp2brxDdYeBaRj8Hmu12RYgFLWWqEZX5C06BiRZ+poq/vGPbKG9bsbACoL8OrZhMkGU9sa6fypVwny5MxRkLB9Xw1gYPlkpsLXF7bQoyhCRZ2SfiGMKHOMzu510hOdFnR1Q9+dwwIaoaLSQNTyUHXcomUV+OercCQwRa+2WTU9SaM5ATtPORD5Xh2gTVxwM1a6iyqvAjrIzsI3Nwwh71ZKbVUvXHKR/gkDBOL32PT2DY6o2soxJA==
X-MS-TrafficTypeDiagnostic: VE1EUR01HT244:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 185.54.75.98
X-SID-PRA: PLUSNET@COMM.PLUS.NET
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Exchange-Diagnostics:
1;VE1EUR01HT244;31:0kdnEP8jacnkto22+zKWSPhRuKd+6k0ro0yubUCIbK/e6OgTxzWmmXMZzwFbTZUMrCcPxZ7gfRVB+vgANtEr6lmxCZkN6NuudRtNU9v0g3rq8PQ7zRNDPE9IJzUNuPo+NskqpiPqsBEHrqTxDV8c3jADoS7K6wcnX5dYHICvbpZPVO63eVJ4HPgSy0d6GfW1CYAQNtJdKwQf4Bn2hTRaRI/s3ms+yP826N6xP7FydFk=;4:zNDF5ly+31ibIt6BOCoPcK21R24rWy/lV5Ey8sfXulwJbl0OWylIY+3ljPiLXZS8HWat/U6j7kCKqMY9W+vvsqQ+pRVGDTUYg8m/g9mD9OR0MTetERSPwlWt1GC7cYkqf1P7Le1PUjf+u3nrUQT21fwlQsTp87cYDnQOnhmDJIyoFwHvOgRQ2G67SB/4LL4jDARxarj3yPe37+peIwG8OLFNVyzvTo5zlyXCKKQXhZr0ac9pN1xWHAPEVcLMngwtqLvrEl/cXbKUuU59216Nb0cwAFGVqOY6+WXOcEaVPx/uJ6QR6kmd5Kx/g41+yKfx
X-Exchange-Antispam-Report-CFA-Test:
BCL:5;PCL:0;RULEID:(444111751)(2890499008)(6300000152)(1201174)(9300010160)(9300000332)(9301000404)(9305000129)(52401380)(52505095)(52503115)(52406095)(52305095)(52206115)(88860335)(82015058);SRVR:VE1EUR01HT244;BCL:5;PCL:0;RULEID:;SRVR:VE1EUR01HT244;
X-Microsoft-Exchange-Diagnostics:
1;VE1EUR01HT244;6:Cdz/k2tGgIan2CVkZSJ40AlsR1S1hwCe6qnKEywCbBd5mK7W1L3GiLUHck2SFPHPpPdUG56YScXEXZYdw6OaldTaD8wlHQE7LesO5cxILmbv7VR/SlQPHXjuUjN0AgTNWdpj1Ua8elQLI6yCO/ZyDrYrENt7MoUYWDaqX0JueQCi6FRFULzZCdnwXZneAKMIudcvvjEnZnuEuMZUjgsPl46bgmoeaoH0gDwKilD6XCNVl3fGijlbpWqalgPD9ugSvVrB9uEQv1sOM0x4b2Uc6IZPlwSBFEnUmWJlCRgjam47FydEhf1deNwByybeQH24ttyfETzLVqNu21MZI6bD1rYMBepxtberfv2XhblIIG3nAaKpmxrgs640cON6Sdlp66/dftOwE9TeTHY3/l/KFsJv28D5v4BwfEXHMA0xoYp/FB8gq1gLTn2vy+Ttr4Yi0PsqDbdSrHbkTaSSXlw47Q==;5:wTWbE6EfO5L4RcKpw8/NNAh9KMCFAG79upGtKjDPA0CjZA5RiVkW7t6aByD06qeRy1pH1hizucKDZdOZldzcKhzc4b5nPlEWYh2CYL9pZfU/MWIVx6cI2jInqZ7KOAVKiOh0EdNJn+Zyq3Vso36Kdzih626hPDBWNusc+dm4AjWBKjW1MUV3cwrQ1x7/YlVohGurTuzLCW9RjHyYyO0JvA==;7:0FNMFiykKgb/YUJeu96TVvSRpQrBYPEvDKsibctQSGXVeNfi41ZsfG4w/fXFAp9K2akpN+tisL6NAoAPXsMEKwnkm9g+JakN3JtklpeakU7QGdF3nqIsaPNwnwnFnetI9hUlRpP20ddRAT/SrL3i9Q==
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jan 2019 18:06:15.8917
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1d5c943d-1a6b-4f83-2698-08d686dda095
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
9bd8b953-1c55-4da7-b616-8bcad099ae8b
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT244
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.6740173
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1580.012
X-Message-Info:
5vMbyqxGkddiUlTPMIW/sdOq9XsJqtpXOZ5JHYW6j99yT4P1VYsrSCtC/TV/HRKL2moGNSFFpqJfVlgva53UoKCn4LO2W0SNiEz7qiAYzEKaWxh43SpDcqnwWSrxWbSVLAmVQxPloD5LUxuVSWqChSAr7I3QY187CCB4LF9ygURrlnVfhqqpGGIwZKVcn2fA9L12pkd7S7OIU47NN/mh9g==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0z
X-Microsoft-Exchange-Diagnostics:
1;DB6PR05MB4630;9:bE0l0N5IZ3b27iQRg4el7gsGFF6PNK3ApQ3jBgvKvJKCVVnl7HFoJC6Ms/kf/BhgURcxD+LVJBJRfWv/sMJxf6RoCm2AA06ojNnkoYEkJf145QPJ5Yc79RXrw6m5du7Qde91ycNWV94AaRfoTeGhU90SQ/2W2hr+wFT2PONCfbA=
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:I;ENG:(5062000261)(5061607266)(5061608174)(4900095)(4920089)(6515079)(4950130)(4990090);
X-Microsoft-Antispam-Message-Info:
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
X-Microsoft-Exchange-Diagnostics:
1;DB6PR05MB4630;27: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

Moderator's note by Dick (Strat): Personal information removed from a public forum (to an area that staff can see).

3 REPLIES 3
JonoH
Hero
Posts: 4,346
Thanks: 1,596
Fixes: 157
Registered: ‎29-09-2011

Re: Phishing/scam Email


@Veeps wrote:

Can you confirm this is in fact a scam email. Thanks

This is from Plusnet, we've noticed that a small number of customers were incorrectly provisioned on a slower fibre product than the one we were billing them for, we're rectifying it for you and refunding any overpayments.

 Jono H
 Plusnet Community Manager
Veeps
Hooked
Posts: 6
Thanks: 1
Fixes: 1
Registered: ‎06-11-2018

Re: Phishing/scam Email

@JonoH

 

Well, that is surprising. Thanks for confirming...

198kHz
Seasoned Hero
Posts: 5,730
Thanks: 2,773
Fixes: 41
Registered: ‎30-07-2008

Re: Phishing/scam Email


@JonoH wrote:

@Veeps wrote:

Can you confirm this is in fact a scam email. Thanks

This is from Plusnet...


Perhaps this phrase

We've recently become aware of a problem with your broadband

could be better worded. 

Murphy was an optimist
Zen FTTC 40/10 + Digital Voice   FRITZ!Box 7530
BT technician (Retired)