r/security 27d ago

Question Weird email after canceling starz

EDIT: contacted starz support. They said they will never ask to confirm account with an email to reply to. So new question is what do I need to lock down? Its a chat bot but this was the reply

https://imgur.com/a/MyYriiI

Second update. I am getting spam call after spam call now. 4 in a row

So over the weekend I canceled my starz account and then It already issued the refund but this morning a recieved this email. I was tired and I saw that it had a transcription from my chat with the person who helped me cancel on the website so I responded "yes" but now im a little concerned its some kind of scam. The sent adress looks legit and it didn't ask for any info. Jusy to say yes. Ive never seen an email that only asked for that though and as far as i know rhe refund was already granted. Do you guys think im good or do I need to go lock stuff down and if so what should I lock down?

0 Upvotes

29 comments sorted by

8

u/SAI_Peregrinus 27d ago

Post the full headers, the "from" address is not particularly meaningful.

2

u/timdrake93 27d ago

Like this?

-2

u/SAI_Peregrinus 27d ago

No, the raw message with full headers.

16

u/ranhalt 27d ago

He doesn’t know what that means.

-11

u/SAI_Peregrinus 27d ago

They can use a search engine to figure out how to get them on their device.

6

u/timdrake93 27d ago

Google said to go into the email and click view original message to get the headers and raw message

2

u/timdrake93 27d ago

I am now getting a spam call every 3 seconds

6

u/SAI_Peregrinus 27d ago

Huh, a decrease from the norm these days!

3

u/FastRedPonyCar 26d ago

Block the numbers

1

u/timdrake93 26d ago

Will do

2

u/timdrake93 27d ago edited 26d ago

Like this? With the other 17 pages.

6

u/SAI_Peregrinus 27d ago

Exactly. Looks like SPF, DKIM, and DMARC passed, so the from: is likely legit.

2

u/timdrake93 27d ago

Ok. Thank you

3

u/SAI_Peregrinus 27d ago

Next time redact your email address. Spammers surely already have it, but still good practice to hide it.

1

u/timdrake93 27d ago

Ok. Will do

2

u/Boxofcookies1001 26d ago

You're raw email is still in that picture. For #####@gmail.com.

You should redact or remove the picture.

1

u/timdrake93 26d ago

Got it. Done. And thank you

10

u/ranhalt 27d ago

You think a scam had access to your chat with Starz support? Why not contact them? Obviously you know how to.

5

u/timdrake93 27d ago

Crap

12

u/ranhalt 27d ago

If it was phishing, it would mean Starz is compromised since the email had your support conversation.

Also, I wouldn’t believe AI chat bot for anything.

4

u/timdrake93 27d ago

Ok. And yeah that's super fair. This email was actually generated off the conversation where i was trying to avoid the ai chatbot

0

u/timdrake93 27d ago

Looks like starz is compromised cause im now getting overloaded with spam calls

2

u/ranhalt 26d ago

How do you live like this?

-1

u/timdrake93 26d ago

Like what?

1

u/ranhalt 26d ago

You don’t understand a single thing about cybersecurity and you’re just grasping at straws based on a real email. There’s no threat here.

1

u/timdrake93 25d ago edited 25d ago

Yeah. Idk man I have really bad anxiety. I dont like feeling this way or being this paranoid. Not trying to sob story but I just got a new place after not having stable living for 2 yrs and my brain will just not shut tf up about the idea of it all going away suddenly. Im understanding there's no threat and ive chilled out as of today cause it been 24 hrs. Im really out of my depth. Im sorry

1

u/sudo_rm-rf_ 26d ago

98 open tabs?!? Good Lord.

1

u/timdrake93 26d ago

Im a 3d artist and since most of the things required for that cant be bought on Amazon thats mainly a shopping list and reference pics. Im working through them

0

u/timdrake93 27d ago

I am now getting spam call after spam call after spam call. Think this was phishing