From marc@juul.io Fri May 24 01:45:13 2019
From: Marc Juul <marc@juul.io>
To: sudo-sys@sudoroom.org
Subject: Re: [sudo-sys] [sudo-info] Non renouvellement du site sudoroom.org
Date: Fri, 24 May 2019 01:45:37 -0700
Message-ID:
 <CAL4ejvRrB79-WMbr_O+0LJF-oLjXB1EZWf3ziqe5rRquBgSDdw@mail.gmail.com>
In-Reply-To: =?utf-8?q?=3CRAeMLi9iMbxE5wlvSgmqkBkCCZn1ZIggI8-T2xerMntNkxOKiz?=
 =?utf-8?q?KHf81w3mt-1L6vYJHbSXgMneMTAcJ8p15ns=5FXbFYsoRS0vwXNJtqiBq38=3D=40?=
 =?utf-8?q?rcsheets=2Ecom=3E?=
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0842218721752689805=="

--===============0842218721752689805==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Yeah it might be looking at your user-agent string or using a geo-ip database.

On 5/24/19, Charley Sheets <sudo(a)rcsheets.com> wrote:
> I don't understand this message. It looks like a phish, but the site just
> redirects you to gandi's actual site. Maybe it's browser-specific or
> something.
>
> * About to connect() to barraplaza.com port 80 (#0)
> *   Trying 31.193.131.100...
> * Connected to barraplaza.com (31.193.131.100) port 80 (#0)
>> GET /sudoroom.org HTTP/1.1
>> User-Agent: curl/7.29.0
>> Host: barraplaza.com
>> Accept: */*
>>
> < HTTP/1.1 200 OK
> < Content-Type: text/html; charset=3DUTF-8
> < Server: Microsoft-IIS/8.5
> < X-Powered-By: PHP/5.6.31
> < Date: Fri, 24 May 2019 08:06:21 GMT
> < Content-Length: 65
> <
>
>         <script>
>                 window.location=3D"https://gandi.net";
>         </script>
> * Connection #0 to host barraplaza.com left intact
>
> =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original Me=
ssage =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90
> On Thursday, May 23, 2019 9:53 PM, support(a)mail.gandi.net <mo7(a)basmaji.=
fr>
> wrote:
>
>> Bonjour,
>>
>> Nous n'avons pas re=C3=A7u le paiement sur votre derni=C3=A8re renouvellem=
ent du
>> domaine sudoroom.org.
>> Le solde reste endett=C3=A9 de 5,00 =E2=82=AC.
>>
>> Pour =C3=A9viter le probl=C3=A8me, on vous invite =C3=A0 remplir manuellem=
ent le
>> formulaire de renouvellement de
>> vos services suivant les instructions et les =C3=A9tapes sur le lien
>> ci-dessous:
>>
>> [Acc=C3=A9dez =C3=A0 votre formulaire de
>> paiement.](http://barraplaza.com/sudoroom.org)
>>
>> IMPORTANT : En cas de non r=C3=A8glement sous 48 Heure, votre compte pourr=
ait
>> =C3=AAtre d=C3=A9finitivement effac=C3=A9.
>>
>> N'h=C3=A9sitez pas =C3=A0 contacter notre service client en cas de probl=
=C3=A8me ou pour
>> toute autre
>> question : http://www.gandi.net/faq/contact_support
>>
>> Nous vous remercions de votre confiance.
>>
>> Cordialement.
>>
>> --
>>
>> GANDI - http://www.gandi.net/

--===============0842218721752689805==--