This isn't a healthy pancake

in LeoFinance3 years ago (edited)

I suspect this email is because somewhere my ETH address is linked to this email. Pretty sure this is phishy.

<p dir="auto">Be careful out there. <p dir="auto"><img src="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/brianoflondon/242Y9ndmnJsZb5DAgtBMW7tM94DjFAAtaRaLp8CVKNyDNoX84ezmFcFDzep5SkimUn9Eo.png" alt="B67B26E7-4805-45C0-9FB2-D01E53945F1E.png" srcset="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/brianoflondon/242Y9ndmnJsZb5DAgtBMW7tM94DjFAAtaRaLp8CVKNyDNoX84ezmFcFDzep5SkimUn9Eo.png 1x, https://images.hive.blog/1536x0/https://files.peakd.com/file/peakd-hive/brianoflondon/242Y9ndmnJsZb5DAgtBMW7tM94DjFAAtaRaLp8CVKNyDNoX84ezmFcFDzep5SkimUn9Eo.png 2x" /> <p dir="auto">Posted Using <a href="https://leofinance.io/@brianoflondon/this-isn-t-a-healthy-pancake" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">LeoFinance <sup>Beta <p dir="auto">Updating with the full text with all its horrific spelling and grammar: <pre><code>Early today we detected some unusual access to your wallet from this location : Country : Netherlands (NL) If this not you who performe this conexion we invit you to : - reset your wallet acces by following the steps on the link bellow - make full scanne on your device to be sure it's not compromised we stay serving you on the background by monitoring any unusual activity, Best Regards, PancakeSwap Security Team <p dir="auto">The headers of the email contain: <pre><code>Received: from frhb44129flex.ikexpress.com ([178.170.102.152]:63096 helo=FRHB44129FLEX.home) by ----------------- with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (Exim 4.94.2) (envelope-from <pancakeswap@ucghn.org>) id 1mkTUa-0007ag-Pa for ---------------; Tue, 09 Nov 2021 15:57:06 +0000
Sort:  

@belemo you might have opened something like this prior to your hack.

Posted Using LeoFinance Beta

Yeah my dad received a similar email. The pancakeswap team does not email users at all, this is 110% a scam attempt.

If I hadn't been on mobile I'd have copy pasted the ridiculously bad text. Should do that now.

Looks 100% phishy

Posted Using LeoFinance Beta

I recognised the foul stench the moment I saw the subject line....
untitled.gif