Amolith on Nostr: I think someone is attempting to spear phish me by saying that one of my domains, ...
I think someone is attempting to spear phish me by saying that one of my domains, redacted.life, is about to be deactivated :akko_thonk:
1: The email displays as being from netcup, a VPS provider I used to use quite a lot but haven't for a while. The actual sender, however, is polifitness.it
2. To renew the domain and prevent it from being deactivated, I need to log into the admin panel. They helpfully provide a link to said admin panel.
3. However, the link text actually heads to … harascandles.gr? :akko_woozy:
My first indication that something was weird was that I've never purchased any domains through netcup :meowLul:
Published at
2023-04-19 14:54:51Event JSON
{
"id": "fb5d3aa0e7aed3b5d855b8c8cc7521b414800b0364682d01130d55bb36af2960",
"pubkey": "ef7f41eac88031498f2e9880d40b92e3236027a634801732a629dc8020826788",
"created_at": 1681916091,
"kind": 1,
"tags": [
[
"mostr",
"https://nixnet.social/objects/2bbd0158-15a9-4c1a-80c7-c30c234a9d23"
]
],
"content": "I think someone is attempting to spear phish me by saying that one of my domains, redacted.life, is about to be deactivated :akko_thonk: \n\n1: The email displays as being from netcup, a VPS provider I used to use quite a lot but haven't for a while. The actual sender, however, is polifitness.it\n\n2. To renew the domain and prevent it from being deactivated, I need to log into the admin panel. They helpfully provide a link to said admin panel.\n\n3. However, the link text actually heads to … harascandles.gr? :akko_woozy: \n\nMy first indication that something was weird was that I've never purchased any domains through netcup :meowLul:\n\nhttps://nixnet.social/media/7cd3e33f1153057c9ef07a6c233ed59318f0196d00c8dcbf13bc5942e8ea1744.png?name=PXWVgiaQSTriIA.png",
"sig": "bb2bc92fbc23044eef40dc5636311f4dbcbc089a095717325470f0b35c2a35024398a46bd2eed1895bbbfd7c37abb978b23c22c9c2ea242e8f0db79f63402a12"
}
