Welcome to the mailbox.org user forum!
 

possible phishing mail

8910884 shared this idea 13 days ago
Proposed

I also sent this to a ticket but they tend to be slow so here as well:


IS THIS REAL?? Who asks people to click links in an email????? And I received no other mail before


I received this (two one from nordmeir@ and one from zukunftswerkstatt-gellersen@mailbox.org) from someone claiming to be you. It seems odd. The links are to google docs and the links within do not work. It also threatens non access if I don’t agree. Please see. I will not agree without confirmation this is from you. Thanks:

—>

Hi MailBox User,


We emailed you last month to let you know about changes we are making to our Terms of Service and Privacy Policy. These changes are key steps towards creating what's next for our consumers, like you, while empowering them with transparency and controls over how and when their data is used.

You can learn more about what these policies mean for you here, as well as more about the changes in our FAQs.

In order to continue to access your (MailBox) Mail account after June 20h-2025, you will need to confirm you accept the Terms of Service. We also need a few moments of your time to explain how we manage your data and provide you with some choices in relation to the processing of that data.

Click Here to Accept Our New Terms & Learn More

If you do not want the new Terms of Service and Privacy Policy to apply to you, you will no longer be able to access your account from June 20th-2025. If you would like the contents of your email account, you may obtain a copy of your data by clicking here.
Thanks for being a MAILBOX customer.

Sincerely,
Everyone at MAILBOX

Return-Path: <nordmeier@mailbox.org>

Delivered-To: tokyoprogressive@mailbox.org

Received: from director-03.heinlein-hosting.de ([10.196.197.1])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))

by dobby20a.heinlein-hosting.de with LMTPS

id uEdDCJrdUWhMowEAlScrYA:P14

(envelope-from <nordmeier@mailbox.org>)

for <tokyoprogressive@mailbox.org>; Tue, 17 Jun 2025 23:26:50 +0200

Received: from smtp1.mailbox.org ([10.196.197.1])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))

by director-03.heinlein-hosting.de with LMTPS

id uEdDCJrdUWhMowEAlScrYA

(envelope-from <nordmeier@mailbox.org>); Tue, 17 Jun 2025 23:26:50 +0200

Date: Tue, 17 Jun 2025 23:26:45 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailbox.org; s=mail20150812;

t=1750195610;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type;

bh=ZSzuYa2Cih5/oq8lZsHOoupgzNS+wopiBs6sDAoU0v8=;

b=N2cOiBeXG4KlW6Ii1Kcxd1Gtamp5KA3dYYCVThn0h+W/klyCJC2RtyPgE9eScyRN4gdwvV

giz/4IAN1KEEEM8PlZ698iQ8V67EdnTu90e0H9fs2A2hvt91RQxC0hgqe4fcJjBfWbKUsc

wjXQk8PRVFXz85sJ+X0h194m+6vmKxBxS5tZxB3Hvmms5VoiQFT7BnX0anzZVZH5RtY4/N

03H7cCgUd1kns/6795ps60MgT/wwWQjpUQGBNlKmf91mb4j3G6MyHhQaiJ/GShbjFYnsEf

v6xEw138aj9KLy0LYOX5B234RL/Kay5l6BEiWoy7kpuDnoN478VUnA7uNi9HqA==

From: "New From Mailbox.org" <nordmeier@mailbox.org>

To: "robert.bestel@mailbox.org" <robert.bestel@mailbox.org>,

"lung@mailbox.org" <lung@mailbox.org>,

"p.burda@mailbox.org" <p.burda@mailbox.org>,

"t.muehlpfordt@mailbox.org" <t.muehlpfordt@mailbox.org>,

"ceng@mailbox.org" <ceng@mailbox.org>,

"somethingramdomrelatedtoservice@mailbox.org"

<somethingramdomrelatedtoservice@mailbox.org>,

"moritz.giesecke@mailbox.org" <moritz.giesecke@mailbox.org>,

"robert.nuske@mailbox.org" <robert.nuske@mailbox.org>,

"robert.edilber@mailbox.org" <robert.edilber@mailbox.org>,

"cmielach@mailbox.org" <cmielach@mailbox.org>,

"hartmut.wickert@mailbox.org" <hartmut.wickert@mailbox.org>,

"rjgregory@mailbox.org" <rjgregory@mailbox.org>,

"sophia.schroeder@mailbox.org" <sophia.schroeder@mailbox.org>,

"lstwn@mailbox.org" <lstwn@mailbox.org>,

"the.middler@mailbox.org" <the.middler@mailbox.org>,

"leon.tiedemann@mailbox.org" <leon.tiedemann@mailbox.org>,

"regclarkinia@mailbox.org" <regclarkinia@mailbox.org>,

"tokyoprogressive@mailbox.org" <tokyoprogressive@mailbox.org>,

"2cc@mailbox.org" <2cc@mailbox.org>

Message-ID: <1849096960.588396.1750195605853@office-sso.mailbox.org>

Subject: =?UTF-8?Q?Official_From_MailBox_-_We=E2=80=99re_upda?=

=?UTF-8?Q?ting_our_(MailBox)_Terms_of_Service?=

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_588395_4573044.1750195605852"

X-Priority: 3

Importance: Normal

X-MBO-RS-META: t98ucduw4i9w1kxzd8ztrbe7rdd5jerr

X-MBO-RS-ID: a8507527b606eb78290

------=_Part_588395_4573044.1750195605852

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 7bit

Hi MailBox User,

We emailed you last month to let you know about changes we are making to our Terms of Service and Privacy Policy https://tinyurl.com/32nhan5k. These changes are key steps towards creating what's next for our consumers, like you, while empowering them with transparency and controls over how and when their data is used.

You can learn more about what these policies mean for you here, as well as more about the changes in our FAQs. https://tinyurl.com/32nhan5k

In order to continue to access your (MailBox) Mail account after June 20h-2025, you will need to confirm you accept the Terms of Service. We also need a few moments of your time to explain how we manage your data and provide you with some choices in relation to the processing of that data.

Click Here to Accept Our New Terms & Learn More https://tinyurl.com/32nhan5k

If you do not want the new Terms of Service and Privacy Policy to apply to you, you will no longer be able to access your account from June 20th-2025. If you would like the contents of your email account, you may obtain a copy of your data by clicking here. https://tinyurl.com/32nhan5k

Thanks for being a MAILBOX customer.

Sincerely,

Everyone at MAILBOX

------=_Part_588395_4573044.1750195605852

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit

Replies (2)

photo
1

I've also seen quite a few very similar emails, although with different sender addresses. Once I noticed such a message disappearing over night without action from my side, probably cleaned up silently by the mailbox.org team. So I was initially guessing if this was "phishing training" from mailbox.org itself. But since I have by now received an annoying level of such emails, I'm rather guessing it's phishing / spam.

Since this seems like a frequent, annoying and potentially security relevant occurrence right now, it would be good to have a statement from mailbox.org on what's going on.

Thanks for bringing this topic up 8910884. If you can still edit your comment, it might be good to redact the public email addresses of other users in the "To:" field?

photo
1

Thank you. I got email from the admin snd they said they deleted it. And indeed it disappeared.


I don’t seem to be able to edit.


Maybe i should ask them to do it??

Leave a Comment
 
Attach a file