Skip to main content
added 19 characters in body
Source Link
user3956566
user3956566

I got an email too. It comes from stackoverflow.email, and all the links go to sg-links.stackoverflow.email, without HTTPS.

And look at this:

$ curl https://stackoverflow.email/ -I
HTTP/2 302  
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

 
This server could not prove that it is sg-links.stackoverflow.email; its security certificate is from *.sendgrid.net. 
This may be caused by a misconfiguration or an attacker intercepting your connection.

This looks like phishing.

I got an email too. It comes from stackoverflow.email, and all the links go to sg-links.stackoverflow.email, without HTTPS.

And look at this:

HTTP/2 302 
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

 

This looks like phishing.

I got an email too. It comes from stackoverflow.email, and all the links go to sg-links.stackoverflow.email, without HTTPS.

And look at this:

$ curl https://stackoverflow.email/ -I
HTTP/2 302  
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

This server could not prove that it is sg-links.stackoverflow.email; its security certificate is from *.sendgrid.net. 
This may be caused by a misconfiguration or an attacker intercepting your connection.

This looks like phishing.

deleted 1 character in body
Source Link

I got thean email too. It comes from stackoverflow.email, and all the links go to stackoverflowsg-links.stackoverflow.email, without HTTPS.

And look at this:

HTTP/2 302 
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

This looks like phishing.

I got the email too. It comes from stackoverflow.email, and all the links go to stackoverflow.email, without HTTPS.

And look at this:

HTTP/2 302 
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

This looks like phishing.

I got an email too. It comes from stackoverflow.email, and all the links go to sg-links.stackoverflow.email, without HTTPS.

And look at this:

HTTP/2 302 
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

This looks like phishing.

Source Link

I got the email too. It comes from stackoverflow.email, and all the links go to stackoverflow.email, without HTTPS.

And look at this:

HTTP/2 302 
cache-control: private
content-type: text/html; charset=utf-8
location: http://email.stackoverflow.com/

And when trying to access by HTTPS:

This looks like phishing.