Re: Your Netflix Membership is on hold ! [#46537] - Spam Warning!!

Re: Your Netflix Membership is on hold ! [#46537]  -  Spam Warning!! This email has been d

Re: Your Netflix Membership is on hold ! [#46537]  -  Spam Warning!!

This email has been doing the rounds:

 

From:                                                      NETFLIX <[email protected]>

Sent:                                                        Tuesday, June 18, 2019 8:49 PM

Subject:                                                  Re: Your Netflix Membership is on hold ! [#46537]

 

 

 

 

 

 

 



We recently failed to validate your payment information we hold on record for your account,
therefore we need to ask you to complete a brief validation process in order to verify your billing and payment details.

www.netflix.com/verification

Failure to complete the validation process will result in a suspension of your netflix membership.

We take every step needed to automatically validate our users, unfortunately in this case we were unable to verify your details.

This process will take a couple of minutes
and will allow us to maintain our high standard of account security.


Netflix Support Team



This message was mailed automatically by Netflix during routine security checks. We are not completely satisfied with your account information and required you to update your account to continue using our services uniterrupted.

 

 

 

 

The actual link points to: https://netflix.userlogin.members-valid-support.com which is obviously a members-valid-support.com address, not to be trusted.
 
the website itself has already been marked as deceptive:
 
And if entered, gives:
 
Which looks reasonably convincing.
 
Going further:
 
 
I proceed to supply my details:
 
 
Rather disturbingly, Chrome asks if I want to input my credit card details, even though this site was marked as deceptive, but it was my choice to enter anyway...
 
 
And finally I receive:
 
 
Of course they would never need your account number and card number together but these sites do recover money so be careful as this website will already be using a new domain name not tagged on Google Chrome.
 
The website has a certificate which is invalid and the owners have obviously used a privacy provider in order to hide their identity so the only action is to report the site and the emails.

Add comment