Hi! I just received an email supposedly from ‘admin’ ‘at’ ‘ibiblio.org’ with some text like this:
Subject: Greetings from ibiblio
Greetings from ibiblio…
You are receiving this message because you have a user account at ibiblio.org that is associated with a directory for a website hosted by ibiblio. We have recently migrated the user info [… text omitted …]
Your ibiblio username is: xxxxxx
And your site directory is: xxxxxx
Your ibiblio filepath is: xxxxx
[…much more text omitted…]
It asks me to fill out a form at ‘forms’ ‘dot’ ‘gle’, describing my site. It suggests I contact ‘sarahwh’ ‘at’ ‘ibiblio.org’ for questions about this form and the customer relationship management system at iBiblio.
Reviewing the headers, it seems to really come from ‘outlook’ ‘dot’ ‘unc’ ‘dot’ edu’ with an SPF soft fail.
I decided to post here, just in case it can help others.