Today I have received a phishing email impersonating Netflix. When inspecting the email I have noticed the email used Stack Overflow Jobs URL redirects to hide the real URL of the phishing site.
You can find the full link below:
https://stackoverflow.com/jobs/companies/a/ext-link?redirectUrl=https%3A%2F%2Flearnfacta.com%2Fprivacy_policy&companyPageId=15983&externalLink=Email&data=02|01||c85849a7fc354c468eba08d84df891f3|84df9e7fe9f640afb435aaaaaaaaaaaa|1|0|637345077272641775&sdata=BOnUrqzDnHgXAVnwODyV4vOxYzp2DEa/XmiKepS8SWo=
and the redirect URL portion leads to: https://learnfacta.com/privacy_policy
which redirects a final time to https://netflix.problem-accountrestore.net/login
, which looks like a legit Netflix login page:
I am not sure if this report is any use to the Stack Overflow staff, but better to be safe than sorry.