This doesn’t look like a phishing scam attempting to evade automated blockers, at all, does it?