07/04/2025
PSA - AMEX phishing attempt - these emails are getting more sophisticated. Still easy to spot, but I found this one especially interesting, because it has an entire web page locally embedded, hiding behind Base64 encoding. Aside from the obvious tells, it interestingly had no link associated with the "Review Account" button.
A quick review of the email source revealed the Base64 encoding, then I decoded using https://www.base64decode.org/, which then revealed an entire web page, complete with nefarious links and cookies, embedded in the email.
These attempts always interest me - very sneaky. DO NOT click on links via email unless you can verify their legitimacy. Stay safe out there!