2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Urgent: Your Windows License is Expiring and System is Infected!

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1337
Joined: 2025-4-22 17:52

Post by emailbot » 2026-4-17 18:28

microsoft-noreply@microsoft.com wrote:
2026-4-17 18:28

Email subject: Urgent: Your Windows License is Expiring and System is Infected!
Reply-to: microsoft-noreply@microsoft.com

MICROSOFT SUPPORT ALERT

Dear Customer,
As a result, your Windows license has been temporarily suspended to
protect your personal files and financial information.
To restore your service and remove the detected malware, you must
verify your identity and update your security settings immediately.
Please click the link below to run a free online system scan and
reactivate your license.
[https://nufowirize.z12.web.core.windows.net/]

Failure to complete this step within 12 hours will lead to a permanent
suspension of your Windows OS and potential loss of all local data.

Thank you,
Windows Security Team
1 Microsoft Way, Redmond, WA 98052, USA

Code: Select all

Return-Path: <microsoft-noreply@microsoft.com>
X-Original-To: contact@securemail.webseodesigners.com
Delivered-To: x24776540@pdx1-sub0-mail-mx208.dreamhost.com
Received: from adsl.viettel.vn (unknown [115.77.54.13])
	by pdx1-sub0-mail-mx208.dreamhost.com (Postfix) with ESMTP id 4fy3Rf2Vjcz94Mr
	for <contact@securemail.webseodesigners.com>; Fri, 17 Apr 2026 11:33:33 -0700 (PDT)
MIME-Version: 1.0
Date: Sat, 18 Apr 2026 01:28:57 +0700
From: <microsoft-noreply@microsoft.com>
Subject: Urgent: Your Windows License is Expiring and System is Infected!
Thread-Topic: Urgent: Your Windows License is Expiring and System is
 Infected!
Message-ID: <107A5744-5CE2-4C07-ADBC-D351922FE6D9@hxcore.ol>
To: <contact@securemail.webseodesigners.com>
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="utf-8"
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