Re-authorize your account from "newsletter-pistonheads"

[tertius]

Just received an email saying:

PistonHeads: Re-Authorize Your Account
Dear Customer,
Thank you for joining the PistonHeads community! We're delighted to have you onboard. To finalize your registration and ensure a seamless experience, please click the link below:

https://www.pistonheads.com/emails/process?token=f...

By clicking on the link, you will not only confirm your account but also securely register your preferred payment method. This step is essential for accessing all the features and benefits available to our valued customers.

If you hover the link that appears to be from PH it is actually newsletter-pistonheads.com which was registered yesterday.

To be honest its fairly convincing, just the lack of any name; the wrong domain (on looking); and obviously the guff about payment method. Plus of course I actually registered some time ago so ...

Anyway thought it was worth highlighting.

[muckyman]

I just got the same email.
More convincing than the normal scams.
Obviously ignored it.

[tertius]

I've actually just had it again, this time to a different email address.

[Ben Lowden]

Thanks for reporting this. Can you forward the email you've sent to [e-mail] so we can investigate please?

[muckyman]

Ben Lowden said:

Thanks for reporting this. Can you forward the email you've sent to [e-mail] so we can investigate please?

Done!

[dickymint]

Ben Lowden said:

Thanks for reporting this. Can you forward the email you've sent to [e-mail] so we can investigate please?

...and your bank details please

Joking aside it's a bit disconcerting how a scammer can connect a PH member with their email address. Unless the scammer is a member and sent him an email via PH and he responded to it?

[tertius]

dickymint said:

...and your bank details please

Joking aside it's a bit disconcerting how a scammer can connect a PH member with their email address. Unless the scammer is a member and sent him an email via PH and he responded to it?

I don't think they do actually connect them as I have had the same email to two different email addresses, only one of which is associated with PH.

Suspect its just scattergun or very very clever indeed ...

[Ben Lowden]

We reported the domain abuse to the hosting provider on this one, and it has now been removed. Thank you for the report on this!