General

  • Target
    Potential Phish - 2026-09-28T130119.292.eml
  • Size 43KB
  • Sample260928-th3fksbf86
  • SHA256 effef0cb578bde8639d910cc335519c5ba93739e3cf6970f56020ce05c328044
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish - 2026-09-28T130119.292.eml
    .eml 43KB
  • email-html-1.txt
    .html 19KB

Potential Phish - 2026-09-28T130119.292.eml

  • SHA256 effef0cb578bde8639d910cc335519c5ba93739e3cf6970f56020ce05c328044
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

1008506.0.prod.3955757.1790488153.4d8b.0.0-0-CHANDRA.KUMAR.NADIPENNAGARI=ASSURANT.COM@updates.consumer.pluxee.in

Date

Sun, 27 Sep 2026 11:19:14 +0530

Subject

=?utf-8?q?=5BExternal=5D_Unlock_Pluxee_Pro_6th_Edition_for_?= =?utf-8?q?=E2=82=B999_=26_save_over_40=2C000_on_top_brands?=

Content-Type

text/html; charset="utf-8"

Received

from MA5PR01MB775839.INDPRD01.PROD.OUTLOOK.COM (::1) by MA0PR01MB9201.INDPRD01.PROD.OUTLOOK.COM with HTTPS; Sun, 27 Sep 2026 06:10:21 +0000

from SJ0PR03CA0129.namprd03.prod.outlook.com (2603:10b6:a03:33c::14) by MA5PR01MB775839.INDPRD01.PROD.OUTLOOK.COM (2603:1096:a01:245::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.7; Sun, 27 Sep 2026 06:10:20 +0000

from CO1PR03MB5857.namprd03.prod.outlook.com (2603:10b6:a03:33c:cafe::30) by SJ0PR03CA0129.outlook.office365.com (2603:10b6:a03:33c::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.11 via Frontend Transport; Sun, 27 Sep 2026 06:10:18 +0000

from SJ0PR03CA0231.namprd03.prod.outlook.com (2603:10b6:a03:39f::26) by CO1PR03MB5857.namprd03.prod.outlook.com (2603:10b6:303:90::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.23; Sun, 27 Sep 2026 06:08:59 +0000

from SJ5PEPF000001CB.namprd05.prod.outlook.com (2603:10b6:a03:39f:cafe::8f) by SJ0PR03CA0231.outlook.office365.com (2603:10b6:a03:39f::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.23 via Frontend Transport; Sun, 27 Sep 2026 06:08:58 +0000

from ord3appcp003.assurant.com (167.79.14.195) by SJ5PEPF000001CB.mail.protection.outlook.com (10.167.242.40) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Sun, 27 Sep 2026 06:08:58 +0000

from pps.filterd (ord3appcp003.assurant.com [127.0.0.1]) by ord3appcp003.assurant.com (8.18.1.11/8.18.1.11) with ESMTP id 68R2BWr73598998 for <[email protected]>; Sun, 27 Sep 2026 02:08:57 -0400

from smtptrans187.octdeliver.in (smtptrans187.octdeliver.in [207.189.186.187]) by ord3appcp003.assurant.com (PPS) with ESMTPS id 4gxgpctunp-250 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <[email protected]>; Sun, 27 Sep 2026 02:08:57 -0400 (EDT)

by smtptrans161.octdeliver.in id hn2pfi1lc4k8 for <[email protected]>; Sun, 27 Sep 2026 11:20:03 +0530 (envelope-from <1008506.0.prod.3955757.1790488153.4d8b.0.0-0-CHANDRA.KUMAR.NADIPENNAGARI=ASSURANT.COM@updates.consumer.pluxee.in>)

Received-Spf

Fail (protection.outlook.com: domain of updates.consumer.pluxee.in does not designate 167.79.14.195 as permitted sender) receiver=protection.outlook.com; client-ip=167.79.14.195; helo=ord3appcp003.assurant.com;

X-Mailer

updates.consumer.pluxee.in

Message-Id

PDEwMDg1MDYuMC5wcm9kLjM5NTU3NTcuMTc5MDQ4ODE1My40ZDhiLjBAcnB0cmsuZ29pbmZpbml0by5jb20+

Extracted URLs

  • file http://track.updates.consumer.pluxee.in/sapi/r/2/MTAwODUwNi4wLnByb2QuMzk1NTc1Ny4xNzkwNDg4MTUzLjRkOGIuMC4w/0/Q0hBTkRSQS5LVU1BUi5OQURJUEVOTkFHQVJJQEFTU1VSQU5ULkNPTQ==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/6ab7bf3ec5d6195223e62a15-20260927

  • file http://track.updates.consumer.pluxee.in/sapi/r/2/MTAwODUwNi4wLnByb2QuMzk1NTc1Ny4xNzkwNDg4MTUzLjRkOGIuMC4w/0/Q0hBTkRSQS5LVU1BUi5OQURJUEVOTkFHQVJJQEFTU1VSQU5ULkNPTQ==/eyJ1c2VkX2JhbGFuY2UiOjAuMDEsImNhbGxfc3VwcHJlc3Npb25fd2ViaG9vayI6dHJ1ZSwibXNnX3JlcV9zb3VyY2UiOiJwYW5lbCIsImN1cnJlbmN5X2V2ZW50Ijoic2VudCIsImNhbGxpbmdfdXJsIjoiW10iLCJ2Zl9yZWNlaXZlZF9kYXRlIjoiMjAyNi0wOS0yNyAxMToxODoyNiIsImNsaWVudF9pZCI6InBsdXhlZUlORklOSVRPOGdoZmVxNWFibSIsInNlbmRfY3VzdG9tX2Rscl9wYXlsb2FkIjpmYWxzZSwiY3VzdG9tX2NsaWVudF93ZWJob29rX2ZsYWciOjEsImNsaWVudF91cmxfcGF5bG9hZF9lbmNyeXB0aW9uIjpmYWxzZSwiY2FtcGFpZ25faW5mbyI6eyJjYW1wYWlnbl9uYW1lIjoiTWFya2V0aW5nX1Byb09uZWNsaWNrXzI3c2VwIiwid29ya2Zsb3dfaWQiOiIiLCJjYW1wYWlnbl9pbnN0YW5jZV9pZCI6IjZhYjg5YmRkZjFhNDhiZmU4ZDA3YTVmMiIsIndvcmtmbG93X25hbWUiOiIiLCJjaGFubmVsIjoiZW1haWwiLCJhcGlfd29ya2Zsb3dfaWQiOiIiLCJzb3VyY2UiOiJlbWFpbCIsImNhbXBhaWduX2lkIjoiNmFiN2JlZjQ3YjdjYzBiNDdiYzRlODRkIn0sImVuYWJsZV93ZWJob29rX2V2ZW50c19mb3JfZ3VpZF9zdGF0dXMiOmZhbHNlLCJ1c2VyX2lkIjo4NTA2LCJzZW5kZXIiOiJjb25zdW1lckB1cGRhdGVzLmNvbnN1bWVyLnBsdXhlZS5pbiIsInBhcmVudF9pZCI6MCwiY2xpZW50X2Rscl9vbiI6OCwiZ3VpZCI6ImtxOXJiMTgyNjY5NncxZjE2MGMwMDJyNHE1UExVWEVFSU5GSSIsImNyZWRpdF91c2VyX2lkIjo4NTA2LCJ1c2VybmFtZSI6InBsdXhlZUlORklOSVRPIiwiY2xpZW50X3NlcSI6IjZhYjdiZjNlYzVkNjE5NTIyM2U2MmExNS0yMDI2MDkyNyIsImJpbGxhYmxlX2NvdW50IjoxLCJhdHRhY2htZW50X2JpbGxhYmxlX2NvdW50IjowLCJjb250ZW50X2JpbGxhYmxlX2NvdW50IjoxLCJzZXF1ZW5jZV9pZCI6IjZhYjdiZjNlYzVkNjE5NTIyM2U2MmExNS0yMDI2MDkyNyJ9/1/aHR0cHM6Ly9wcm8uY29uc3VtZXJzLnBsdXhlZS5pbi8=/6ab7bf3ec5d6195223e62a15-20260927

  • file http://track.updates.consumer.pluxee.in/sapi/u/2/MTAwODUwNi4wLnByb2QuMzk1NTc1Ny4xNzkwNDg4MTUzLjRkOGIuMC4w/0/Q0hBTkRSQS5LVU1BUi5OQURJUEVOTkFHQVJJQEFTU1VSQU5ULkNPTQ==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-20260927