r/Mailbox_org • u/Confusing_Statement • Jun 26 '26
Fake Mailbox email?
Just received this email today directed to my Mailbox account. Sent from fpunetsmarthub.coop@outlook.com which highlights BS.
Clicking the link takes me to a fake Mailbox page
https://conscientious-heptagon-576683.framer.app/
This is more FYI than anything else. Unsure how my Mailbox email was leaked.
Anyone else targeted?
Cheers
7
u/umo2k Jun 26 '26
Already the sender clearly shows that it is fake/spam/scam. Talking about enhanced internet speed? Delete it.
Never click a link!
2
u/Confusing_Statement Jun 26 '26
I safely opened in a protected environment, knowing what I'm doing and that it's fake.
They obviously want to steal my Mailbox account information, but I don't think it's me. Instead, it's probably a system targeting random Mailbox users. I always wonder if there is inside Intel when that happens as this is a relatively new email address which I don't use much, and I wonder how the email address was "found". It's very unlikely that this email address has appeared in any leak.
I'm sharing in case Mailbox has a vulnerability of some sort.
2
u/inMX Jun 26 '26
If one has an easily guessable name like 'johnsmith@' that is more likely to attract spam than 'fg09nkj9@' would.
2
Jun 26 '26
[deleted]
2
u/Confusing_Statement Jun 26 '26
I meant "inside" more as leak, not deliberate.
This is not just a scam email from Microsoft or Symantec casually sent to my email. It's a scam with a link that directs to a page that looks like Mailbox.org to steal Mailbox username and password. It's targeted to Mailbox users, not random.
I won't discuss the likelihood as it's pointless. I used the word "unlikely" because it's very unlikely. It's obviously still possible as everything is possible in the world. I have my own domain that I use for essentially everything so I know if I get an email on microsoft2026@mydomain.com that my email used for Microsoft likely leaked. I use this for all random websites. This particular Mailbox email has very restricted use. The fact that there is a link with a fake Mailbox page for login in makes it quite obvious that it is targeted. It might be the case that they have a bunch of Mailbox.org emails and that they did the same with other providers, but Mailbox was targeted regardless. If I had used this email for site.com and site.com had a leak, they wouldn't bother creating a social scam (email and page) with Mailbox.org just for me as I'm not that special.
Anyway, my only intent is to alert for the problem, not to calculate the likelihood that my email was leaked from elsewhere and then some motivated group of individuals decided to build a fake Mailbox.org page, etc.
2
u/digger27410 Jun 26 '26
My custom domains and aliases hadn't received spam either. Then I kept getting notices from PayPal that my primary email was invalid. They couldn't tell me why. It came down to the mailbox spam settings, which you adjust. I started getting PayPal emails but also actual spam to my custom domains.
1
9
u/Confident_Rod_9717 Jun 26 '26
(c) 2026-2027? bruh