Hacker News new | ask | show | jobs
by Dead_Lemon 1226 days ago
I found the Metamask email in my spam, with the subject: "MetaMask : Your wallet is about to be suspended", with the headline of the mail "Your wallet is about to be suspended Apply for KYC Verification"

Hopefully no one falls for these, sneaky to hind the redirect behind the links.namecheap
2 comments
notahacker 1226 days ago
I think the redirect being behind links.namecheap was an artefact of the compromised mailing service rather than intended behaviour: the body text of the Metamask email displayed a fake metamask URL https://verification.metamask.io/KYC?[snipped ID] that the link.namecheap.com link was wrapped around

Did make it clear that something belonging to Namecheap had been compromised though...

link
mmphishfight 1226 days ago
Would you be able to share the (scrubbed from your own personal info) headers on a gist or pastebin or similar?
link