From sudo@rcsheets.com Fri May 24 01:08:28 2019
From: Charley Sheets <sudo@rcsheets.com>
To: sudo-sys@sudoroom.org
Subject: Re: [sudo-sys] [sudo-info] Non renouvellement du site sudoroom.org
Date: Fri, 24 May 2019 08:08:48 +0000
Message-ID: <RAeMLi9iMbxE5wlvSgmqkBkCCZn1ZIggI8-T2xerMntNkxOKizKHf81w3mt-1L6vYJHbSXgMneMTAcJ8p15ns_XbFYsoRS0vwXNJtqiBq38=@rcsheets.com>
In-Reply-To: <ODUZNZA5.MZIWOTQWNA.28578805240653201923347607796@basmaji.fr>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0400462794830183956=="

--===============0400462794830183956==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I don't understand this message. It looks like a phish, but the site just red=
irects you to gandi's actual site. Maybe it's browser-specific or something.

* About to connect() to barraplaza.com port 80 (#0)
*   Trying 31.193.131.100...
* Connected to barraplaza.com (31.193.131.100) port 80 (#0)
> GET /sudoroom.org HTTP/1.1
> User-Agent: curl/7.29.0
> Host: barraplaza.com
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Type: text/html; charset=3DUTF-8
< Server: Microsoft-IIS/8.5
< X-Powered-By: PHP/5.6.31
< Date: Fri, 24 May 2019 08:06:21 GMT
< Content-Length: 65
<

        <script>
                window.location=3D"https://gandi.net";
        </script>
* Connection #0 to host barraplaza.com left intact

=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original Mess=
age =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90
On Thursday, May 23, 2019 9:53 PM, support(a)mail.gandi.net <mo7(a)basmaji.fr=
> wrote:

> Bonjour,
>
> Nous n'avons pas re=C3=A7u le paiement sur votre derni=C3=A8re renouvelleme=
nt du domaine sudoroom.org.
> Le solde reste endett=C3=A9 de 5,00 =E2=82=AC.
>
> Pour =C3=A9viter le probl=C3=A8me, on vous invite =C3=A0 remplir manuelleme=
nt le formulaire de renouvellement de
> vos services suivant les instructions et les =C3=A9tapes sur le lien ci-des=
sous:
>
> [Acc=C3=A9dez =C3=A0 votre formulaire de paiement.](http://barraplaza.com/s=
udoroom.org)
>
> IMPORTANT : En cas de non r=C3=A8glement sous 48 Heure, votre compte pourra=
it =C3=AAtre d=C3=A9finitivement effac=C3=A9.
>
> N'h=C3=A9sitez pas =C3=A0 contacter notre service client en cas de probl=C3=
=A8me ou pour toute autre
> question : http://www.gandi.net/faq/contact_support
>
> Nous vous remercions de votre confiance.
>
> Cordialement.
>
> --
>
> GANDI - http://www.gandi.net/



--===============0400462794830183956==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============0400462794830183956==--