Phishing Fear

Well done phishing campaign just landed in my inbox. This one gave me a pause and smartly goes after a “fear” motive. Did someone just compromise my account? That anxiety could lead to a quick login attempt and complete takeover. The info@rumpunch.io from address was easy to spot though. The other mistake was the “New York” with a Norway flag. Also seems their link was taken down with a 404.

jamie ~ % curl --head 'https://track.pstmrk.it/3s/securemai.custredir91224.com%2F[…]'
HTTP/2 404 
server: awselb/2.0
date: Sat, 24 Oct 2026 16:18:48 GMT
content-type: application/text
content-length: 0
x-robots-tag: noindex

Stay safe out there! 🤞