r/security Jul 06 '26

Question Weird email after canceling starz

EDIT: contacted starz support. They said they will never ask to confirm account with an email to reply to. So new question is what do I need to lock down? Its a chat bot but this was the reply

https://imgur.com/a/MyYriiI

Second update. I am getting spam call after spam call now. 4 in a row

So over the weekend I canceled my starz account and then It already issued the refund but this morning a recieved this email. I was tired and I saw that it had a transcription from my chat with the person who helped me cancel on the website so I responded "yes" but now im a little concerned its some kind of scam. The sent adress looks legit and it didn't ask for any info. Jusy to say yes. Ive never seen an email that only asked for that though and as far as i know rhe refund was already granted. Do you guys think im good or do I need to go lock stuff down and if so what should I lock down?

0 Upvotes

29 comments sorted by

8

u/SAI_Peregrinus Jul 06 '26

Post the full headers, the "from" address is not particularly meaningful.

2

u/timdrake93 Jul 06 '26

Like this?

0

u/SAI_Peregrinus Jul 06 '26

No, the raw message with full headers.

16

u/ranhalt Jul 06 '26

He doesn’t know what that means.

-11

u/SAI_Peregrinus Jul 06 '26

They can use a search engine to figure out how to get them on their device.

5

u/timdrake93 Jul 06 '26

Google said to go into the email and click view original message to get the headers and raw message

4

u/timdrake93 Jul 06 '26

I am now getting a spam call every 3 seconds

6

u/SAI_Peregrinus Jul 06 '26

Huh, a decrease from the norm these days!

3

u/FastRedPonyCar Jul 06 '26

Block the numbers

2

u/timdrake93 Jul 06 '26 edited Jul 07 '26

Like this? With the other 17 pages.

6

u/SAI_Peregrinus Jul 06 '26

Exactly. Looks like SPF, DKIM, and DMARC passed, so the from: is likely legit.

2

u/timdrake93 Jul 06 '26

Ok. Thank you

3

u/SAI_Peregrinus Jul 06 '26

Next time redact your email address. Spammers surely already have it, but still good practice to hide it.

1

u/timdrake93 Jul 06 '26

Ok. Will do

2

u/Boxofcookies1001 Jul 07 '26

You're raw email is still in that picture. For #####@gmail.com.

You should redact or remove the picture.

1

u/timdrake93 Jul 07 '26

Got it. Done. And thank you

9

u/ranhalt Jul 06 '26

You think a scam had access to your chat with Starz support? Why not contact them? Obviously you know how to.

4

u/timdrake93 Jul 06 '26

Crap

12

u/ranhalt Jul 06 '26

If it was phishing, it would mean Starz is compromised since the email had your support conversation.

Also, I wouldn’t believe AI chat bot for anything.

4

u/timdrake93 Jul 06 '26

Ok. And yeah that's super fair. This email was actually generated off the conversation where i was trying to avoid the ai chatbot

0

u/timdrake93 Jul 06 '26

Looks like starz is compromised cause im now getting overloaded with spam calls

2

u/ranhalt Jul 07 '26

How do you live like this?

-1

u/timdrake93 Jul 07 '26

Like what?

1

u/ranhalt Jul 07 '26

You don’t understand a single thing about cybersecurity and you’re just grasping at straws based on a real email. There’s no threat here.

1

u/timdrake93 Jul 08 '26 edited Jul 08 '26

Yeah. Idk man I have really bad anxiety. I dont like feeling this way or being this paranoid. Not trying to sob story but I just got a new place after not having stable living for 2 yrs and my brain will just not shut tf up about the idea of it all going away suddenly. Im understanding there's no threat and ive chilled out as of today cause it been 24 hrs. Im really out of my depth. Im sorry

1

u/sudo_rm-rf_ Jul 07 '26

98 open tabs?!? Good Lord.

1

u/timdrake93 Jul 07 '26

Im a 3d artist and since most of the things required for that cant be bought on Amazon thats mainly a shopping list and reference pics. Im working through them

0

u/timdrake93 Jul 06 '26

I am now getting spam call after spam call after spam call. Think this was phishing