Posts

Showing posts with the label Phishing

Ace Hardware “You Have Won a YETI PATRIOTIC Bundle” Scam Email

Image
Warning: I received an unsolicited email claiming to be from Ace Hardware and saying that I had been selected to receive a “YETI® PATRIOTIC BUNDLE.” The email asks the recipient to complete a short survey and then click “CLAIM YOUR REWARD.” This is a scam email. Do not click the reward button, complete the survey, or provide personal or payment information. Email subject and sender Subject: - You have won a YETI PATRIOTIC Bundle 🎁 ID#136703 Sender: Ace Hardware® info@hn7dm50x.shedutypubli.br.com I received this email on September 14, 2026. The sender address is not from Ace Hardware's official acehardware.com domain. What the email claims The message says: Today's winner is YOU HAVE BEEN SELECTED! It claims that the recipient has been chosen to receive a: YETI® PATRIOTIC BUNDLE It then says the reward is part of an “exclusive customer loyalty program” and asks the recipient to answer a survey that supposedly takes only 60 seconds. The main...

MetaMask phishing email from system@phrase.com: “Please set up your new sign option and link your email”

Image
I received a suspicious email impersonating MetaMask with the subject: Please set up your new sign option and link your email The visible sender was: TheMetamaskTeamTMS Phrase <system@phrase.com> This email is particularly worth documenting because Gmail reported that its authentication checks passed: SPF: PASS DKIM: PASS for phrase.com DMARC: PASS However, passing SPF, DKIM and DMARC does not mean that MetaMask sent or authorized the message. What the email says The message asks the recipient to set up a “new sign option” and link an email address. It says the action applies to all users and creates urgency by stating that the link will expire after 24 hours. The main button says: Set Up New Sign Option & Link Email The email also states: This link will expire after 24 hours. I have intentionally not reproduced the destination URL in this article. Why this email should not be trusted as a MetaMask message MetaMask's own Help Center ...