From 5de2d072ef1824f9511a74b2cec82e833d959d7f Mon Sep 17 00:00:00 2001 From: hyang Date: Fri, 13 Sep 2024 21:59:17 -0700 Subject: updoot --- .../2024_08_26_myhoppophop.fr/_index.md | 251 +++++++ .../images/myhoppophop.png | Bin 0 -> 173548 bytes .../_index.md | 798 +++++++++++++++++++++ .../images/not_spotify.png | Bin 0 -> 184925 bytes content/hall_of_shame/_index.md | 6 + 5 files changed, 1055 insertions(+) create mode 100644 content/hall_of_shame/2024_08_26_myhoppophop.fr/_index.md create mode 100644 content/hall_of_shame/2024_08_26_myhoppophop.fr/images/myhoppophop.png create mode 100644 content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/_index.md create mode 100644 content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/images/not_spotify.png create mode 100644 content/hall_of_shame/_index.md (limited to 'content') diff --git a/content/hall_of_shame/2024_08_26_myhoppophop.fr/_index.md b/content/hall_of_shame/2024_08_26_myhoppophop.fr/_index.md new file mode 100644 index 0000000..695483b --- /dev/null +++ b/content/hall_of_shame/2024_08_26_myhoppophop.fr/_index.md @@ -0,0 +1,251 @@ +--- +title: "2024-08-26 " +date: 2024-08-26T00:51:16-07:00 +--- + +Pretty clever phishing attempt. The sender disguised as Porkbun, a domain name registrar, which also serves this very website! + +![helo](images/myhoppophop.png) + +Below is the full email sent to me: + +``` +Return-Path: +X-Original-To: hyang@hyang.xyz +Delivered-To: hyang@hyang.xyz +Authentication-Results: hyang.xyz; + dkim=pass (1024-bit key; unprotected) header.d=myhoppophop.fr header.i=info@myhoppophop.fr header.a=rsa-sha256 header.s=1723124889.myhoppophop header.b=SLPzUN5k; + dkim-atps=neutral +DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1723124889.myhoppophop; + d=myhoppophop.fr; + h=From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:MIME-Version: + Content-Type; i=info@myhoppophop.fr; + bh=D2wRw82qhXPqRVI04n+5Jj1YkVSQs3pachrBoknxSCc=; + b=SLPzUN5k6iEU0OemNLg/JlgHAlQCEBUr7ZWXavROMobkHAvN5Fy6DOTB0jHtlz4zYIibjbbUkGYq + YFRz226ITFyMJGPCsMWG9rMuIzchoFmgYCYs4jJLVjumG11Mmg1Y4mm6fCz9vz1iOpNk3GY2nTHM + Jdv5fddx4lFDhVUBUbM= +From: "porkbun.com" +To: hyang@hyang.xyz +Subject: Last reminder : Subscription Renewal Notification +Message-ID: <87839932-4f02-84a9-7cc3-32badd5f4bde@myhoppophop.fr> +Content-Transfer-Encoding: quoted-printable +Date: Mon, 26 Aug 2024 14:50:29 +0000 +MIME-Version: 1.0 +Content-Type: text/html; charset=utf-8 + + +

+ + + +
+ + + +<= +/TBODY>
+ + + +
+ + + +
+ + + +
+ + + +
+ + + + + + + + + + + + + +
+

Subscription Renewal Notification

+

We are reaching out to inform you that your subscription has = +recently expired. Our attempt to process payment using your saved method = +encountered a technical issue which prevented the payment from going = +through.

+

To prevent closure of your store, we kindly request that you = +resolve this matter within the next 2 days by settling the outstanding = +amount.

+

Please click the link below to = +renew your subscription:

Renew Subscription
+

We understand that unforeseen circumstances may arise, but = +prompt payment of this invoice is essential for maintaining your = +subscription.

We appreciate your cooperation in promptly resolving this issue= +.

+


+ + + +
+ + + + +

 

+``` diff --git a/content/hall_of_shame/2024_08_26_myhoppophop.fr/images/myhoppophop.png b/content/hall_of_shame/2024_08_26_myhoppophop.fr/images/myhoppophop.png new file mode 100644 index 0000000..c0ded62 Binary files /dev/null and b/content/hall_of_shame/2024_08_26_myhoppophop.fr/images/myhoppophop.png differ diff --git a/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/_index.md b/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/_index.md new file mode 100644 index 0000000..3434651 --- /dev/null +++ b/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/_index.md @@ -0,0 +1,798 @@ +--- +title: "2024-09-05 " +date: 2024-09-05T00:51:16-07:00 +--- + +Pretended to be Spotify. I don't have Spotify premium, so this didn't work on me. Better luck next time! + +I'm not actually sure if the domain is entirely owned by the scammer in question, or if they just got hacked and are being exploited + +![helo](images/not_spotify.png) + +Below is the full email they sent to me: + +``` +Return-Path: +X-Original-To: hyang@hyang.xyz +Delivered-To: hyang@hyang.xyz +Authentication-Results: hyang.xyz; + dkim=pass (1024-bit key; secure) header.d=cindyphenixmedium.com header.i=support.spotify@cindyphenixmedium.com header.a=rsa-sha256 header.s=1724361908.cindyphenixmedium header.b=mqyZ0K3I; + dkim-atps=neutral +DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1724361908.cindyphenixmedium; + d=cindyphenixmedium.com; + h=From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:MIME-Version: + Content-Type; i=support.spotify@cindyphenixmedium.com; + bh=/6V7uyHsXHrZVA34fU/NWVcYBl31+u+HcYi4qA/f3lY=; + b=mqyZ0K3IUL48JmHXkqEHwOOeaskl0KvnObU+qHUDz/4WoNoDVugxxglkbjFZVJaM0WFhvr6PnxHQ + mgyk8v2Iwtxdxcas9wiy4OI587bkL5cWh039QG0gPRk9oEu8FnXBBKAIEBRP3ha2cdbEzG8kCv0C + 82Ns3v1pfuyCgNvzsAw= +X-Priority: 3 +From: =?UTF-8?B?U+KAi+KAi+KAi3BvdOKAi+KAi+KAi2lm4oCL4oCL?= + =?UTF-8?B?4oCLeQ==?= +To: hyang@hyang.xyz +Subject: =?UTF-8?Q?Subs=E2=80=8B=E2=80=8B=E2=80=8Bcripti?= + =?UTF-8?Q?=E2=80=8B=E2=80=8B=E2=80=8Bon_Notifi?= + =?UTF-8?Q?=E2=80=8B=E2=80=8B=E2=80=8Bcatio?= + =?UTF-8?Q?=E2=80=8B=E2=80=8B=E2=80=8Bn=20?= +Message-ID: +Content-Transfer-Encoding: quoted-printable +Date: Thu, 05 Sep 2024 21:01:41 +0000 +MIME-Version: 1.0 +Content-Type: text/html; charset=utf-8 + + + + + + + +
+ + + + + + +
+ + + + + + +
+ + + + + + +
+ + + = + + + + + = +
+ + + + = + + + = + + +
+ + 3D"Logo + +
+ = +
+
+
+ + + + + + + +
+ + + + + + +
+ + + = + + + + = + +
+ + + = + + + = + + + + + = + + + + + = + + + = + + + + + = + + + + = +
+

+ Subscription = +Notification +

+
+

We are reaching out to = +inform you that your subscription has recently expired. Our attempt to = +process payment using your saved method encountered a technical issue which= + prevented the payment from going through.
+ = +

+
+

To prevent closure of = +your plan, we kindly request that you resolve this matter within the next 2= + days by settling the outstanding amount.

+ = +
+

Please click the link below to renew = +your subscription:

+
+ Subscription + = +
+ = +

We understand that unforeseen circumstances may arise, but = +prompt payment of this invoice is essential for maintaining your = +subscription.
+
We = +appreciate your cooperation in promptly resolving this issue.
+

+ = +

+
+

+ = +
+
+ = +
+
+ + + + + + +
+ + = + + + + + + +
+
+
+ + + +``` diff --git a/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/images/not_spotify.png b/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/images/not_spotify.png new file mode 100644 index 0000000..14d1b0c Binary files /dev/null and b/content/hall_of_shame/2024_09_13_support.spotify@cindyphenixmedium.com/images/not_spotify.png differ diff --git a/content/hall_of_shame/_index.md b/content/hall_of_shame/_index.md new file mode 100644 index 0000000..6b20332 --- /dev/null +++ b/content/hall_of_shame/_index.md @@ -0,0 +1,6 @@ +--- +title: "Hall of Shame" +description: I currently run a personal email server on this domain, which doesn't have spam filters of any kind. In lieu of a spam filter, I will post full emails of those who attempt to scam me. +#layout: archives +#type: essays +--- -- cgit v1.2.3