stux⚡️Dec 30, 2022

⚠️ WARNING! ⚠️

I just received this email in a catch-all that was addressed to a user. Mastodon does NOT send such mails and this leads to a malicious login page!

Please make sure you are on the correct instance URL before logging in!

Also make sure the emails are send from the instance you are on! Often this email can be found on the /about page

#Mastodon

Show threadAlan Langford 🇨🇦🧤🧊摏Dec 30, 2022
@stux Also, click on that link and log in with fake data. Make it nearly impossible to filter out the people who have been tricked from the garbage, let them stew in a morass of bad data, hopefully triggering firewalls in the process.
Show threadUrsidinoj/The Bjornsdottirs
@alan @stux Just striking the link may alert them that your email works. I recommend not doing that.
Dec 31, 2022 at 1:19pmWeb
Show threadAlan Langford 🇨🇦🧤🧊摏Dec 31, 2022
@ellenor2000 @stux This is true. I forget that not everyone has a unique address with a nonce for everything they sign up for. If your email is in plain text in the link, then you can copy it and mess that up too...