Jump to content

[HH#648192] Issue 19287977: Phishing attack at hxxp://oluxcc.heliohost[.]us/netflix/login/gb-en/signin/signin.php?cmd=_update-information&account_update=6655a4c832fd17b0597dbca4cb056411&lim_session=dee6ea5a7c9e7bb2256de3bbfab04f71eccc186e


Recommended Posts

Posted
Username: N/A, Server: N/A, Main Domain: N/A

Hello,

We have discovered a phishing attack located on your network:

hxxp://oluxcc.heliohost[.]us/netflix/login/gb-en/signin/signin.php?cmd=_update-information&account_update=6655a4c832fd17b0597dbca4cb056411&lim_session=dee6ea5a7c9e7bb2256de3bbfab04f71eccc186e [65.19.141.67]

This attack targets our customer, Netflix, website URL https://www.netflix.com/.

Would it be possible to have the fraudulent content, and any other associated fraudulent content, taken down as soon as you are able to?

Additionally, please send any files associated with the fraudulent content to records@netflix.com so that our customer and law enforcement agencies can investigate the incident further.

More information about the detected issue is provided at https://incident.netcraft.com/97b4b8826ea7/

Many thanks,

Netcraft

Phone: +44(0)1225 447500
Fax: +44(0)1225 448600
Netcraft Issue Number: 19287977

To contact us about updates regarding this attack, please respond to this email. Please note: replies to this address will be logged, but aren't always read. If you believe you have received this email in error, or you require further support, please contact: takedown@netcraft.com.

This mail can be parsed with x-arf tools. Visit http://www.xarf.org/ for more information about x-arf.

---
Attachment: none
Category: fraud
Date: 2021-06-23T01:38:44+00:00
Domain: heliohost.us
Port: 80
Report-ID: takedown-response+19287977@netcraft.com
Report-Type: phishing
Reported-From: takedown@netcraft.com
Schema-URL: http://www.xarf.org/schema/fraud_0.1.4.json
Service: http
Source: http://oluxcc.heliohost.us/netflix/login/gb-en/signin/signin.php?cmd=_update-information&account_update=6655a4c832fd17b0597dbca4cb056411&lim_session=dee6ea5a7c9e7bb2256de3bbfab04f71eccc186e
Source-Type: uri
User-Agent: Netcraft Takedown

Guest
This topic is now closed to further replies.
×
×
  • Create New...