Skip to content
Notes by Axbom
Per Axbom Bluesky

Tired on a Friday evening I was dangerously close to falling for this phishing attempt.

I am a Mailgun customer, but while this is a working address it's not the one I use for Mailgun. I also recently replaced my card, which played into this. But why use my own address as sender account?

1/2

CASE ID: 6072996379

From Mailgun <per@axbom.com>
To per@axbom.com
Date Friday, 11 April 2025 at 22:22 CEST

Dear Mailgun Customer,

We regret to inform you that your recent payment attempt was declined by your paym ent provider.

To ensure continued access to your services, please update your billing information at your earliest convenience below.

https://app.mailgun.com/billing/9OD9LAk
1wDN9XVGHN80rURvWkPfhSoxtoWQTZ6fH
KxOUbRuix
C8iU0oWhnbVXkcUKGDrAQsoSC3Raw|pHCb
nuxBGM4BdTkWXbgmFrVGly6p
cdRIchc8WtFfjk8LGZPqKTndFLhPsR
YPdSL5aZtYDpVHgR98sBYKqJd
VK8w9A2qyJhDTzyJLdNd

This example demonstrates a serious weakness in email clients, where it's possible to display a link that looks legit and have it link to a completely different website in the background.

Don't click links in emails!

(Via direct Mailgun visit I could verify I had no outstanding payments.)

2/2

CASE ID: 6072996379

From Mailgun <per@axbom.com>
To per@axbom.com
Date Friday, 11 April 2025 at 22:22 CEST

Dear Mailgun Customer,

We regret to inform you that your recent payment attempt was declined by your paym ent provider.

To ensure continued access to your services, please update your billing information at your earliest convenience below.

https://app.mailgun.com/billing/9OD9LAk
1wDN9XVGHN80rURvWkPfhSoxtoWQTZ6fH
KxOUbRuix
C8iU0oWhnbVXkcUKGDrAQsoSC3Raw|pHCb
nuxBGM4BdTkWXbgmFrVGly6p
cdRIchc8WtFfjk8LGZPqKTndFLhPsR
YPdSL5aZtYDpVHgR98sBYKqJd
VK8w9A2qyJhDTzyJLdNd

🔗 Originally posted on Bluesky

12 Apr 2025, 07:27
Share
LinkedIn Bluesky Email
  • Notes by Axbom
  • RSS

© 2026 Notes by Axbom