Phishing email impersonating Capital One sent from OnlineAlerts--[yourname]@email.cz
Watch out for an email like this about Capital One, or any other financial site. If your account is locked, no reputable company should send you a link to enter your login information.
From my experience, real Capital One messages come from capitalone@notification.capitalone.com
To report suspicious emails to Capital One, visit capitalone.com/help-center/fraud-disputes/report-suspicious-email/. After filling out their form, forward the scam email you received to abuse@capitalone.com.
We've locked your online access.
Hi [name],
For your security, we've locked your online access due to too many unsuccessful sign-in attempts.
To sign in, you'll need to find and sign in with your existing username and password and need to reset your password after signing in.
Unlock Online Access [phishing link redacted]
- iOS
- Sign in to the Capital One Mobile app on your mobile device.
- Tap your profile photo.
- Select Security then mobile app verification.
- Tap the toggle switch next to mobile app verification to turn this feature on.
- Android
- Sign in to the Capital One Mobile app on your mobile device.
- Tap your profile photo.
- Select Security then Manage My Devices.
- Tap the toggle switch next to the name of the device you’re currently using.
Your safety and security are important to us. Thank you for choosing Capital One.
This one was sneaky because those numbered lists after the link seem like legitimate steps. I have never used their mobile app, but my suspicion is those steps would sign you out of the app. If you clicked the link and entered your login information, the attacker has it and could change it. Getting you to sign out of the app ensures you don't have any access at that point.
They also did a good job of including Capital One's boilerplate at the bottom of the message, including the legitimate From email and links to their Privacy Policy, Help, and Contact. The links used the click-notification.capitalone.com domain. I confirmed that matches real messages from Capital One.
To ensure delivery, add capitalone@notification.capitalone.com to your address book.
This email was sent to [email] and contains information directly related to your account with us, other services to which you have subscribed, and/or any application you may have submitted.
Capital One does not provide, endorse or guarantee any third-party product, service, information or recommendation listed above. The third parties listed are not affiliated with Capital One and are solely responsible for their products and services. All trademarks are the property of their respective owners.
Please do not reply to this message, as this email inbox is not monitored. To contact us, visit www.capitalone.com/help-center/contact-us.
Aside: I actually closed my Capital One account a couple months ago. They warned that eventually my online access might be turned off and they would send tax documents in the mail. At first glance, I thought that's what this message was, but realized my account was under a different email, plus @email.cz is phishy as hell.
Cooked this recipe tonight for the first time. Time consuming, but worth the effort.
Whole Yukon Gold potatoes trimmed to a flat bottom surface with thin slices the stop short of the base. Poached in reduced chicken stock before being oven fried in clarified butter with fresh herbs. So. Delicious. And, bonus, they look like little croissants!
Well, I think that For All Mankind stuck the landing. It’s still incredibly silly at times, but they got me with the finale, where everything really did come together in a nice emotional crescendo.
Wired up my Claude Code via A2A with my OpenClaw agent. They share a memory via Honcho, so at all times both agents have the same understanding of my home lab. Cool 😎
Spot on checklist for car makers from John Siracusa, who always has a knack for this sort of thing.
In 2026, we’re well past the time when EVs need to compromise safety and functionality in order to appear futuristic. As for the cost savings, well, that’ll be harder to shake. Once automakers got a taste for cheap touchscreens, they spread to all cars, not just EVs.
To help the industry get back on the right track, I’ve created a checklist for car designers. Make sure your new car—EV or otherwise—checks all these boxes to avoid making the same stupid mistakes that have plagued modern cars for years.
It’s no accident that we are in the midst of selling our Rivian R1S, which fails to check quite a few boxes:
Not on the checklist, but relevant, is that Rivian doesn’t support Apple CarPlay.
Meanwhile, my BMW i4 suffers from none of these problems, which is why we decided to get a used iX for my wife. Physical charge port doors, real door handles, “stalks” to adjust the direction of airflow, and native support for CarPlay. They aren’t perfect, but they give the same great BMW experience that exists in the rest of their ICE cars without compromise.
Gierratio
On The Fuel Efficiency of Launching My Enemies Into The Sun
Launching your enemies into the sun is simple with the one easy trick rocket scientists don't want you to know about!
When snark and nerdiness collide, the results are often delightful, and this post is no exception.
Calculating the delta-v needed to launch someone into the sun is easier mathematically but tougher conceptually because it actually requires the counterintuitive approach of firing your rockets retrograde until your orbital velocity becomes zero. Since your velocity is now zero, the sun is going to pull you straight down until you become a toasty, concerningly fleshy [sic] marshmellow.
In the last 20 years of my life, I’ve slowly devolved into a concerningly fleshy marshmallow with very little aid from gravity.
What a fun post.