Example Phishing email from Lotto Max with Subject Lotto Max Giveaway – Claim Your Home Depot Gift Card

For the record, this is a Lotto Max phishing email attempt that is recently going around, with subject "Lotto Max Giveaway – Claim Your Home Depot Gift Card"

What to do?  Report them, go to bottom of page. 

This email was riding the wave of a recent Lotto Max prize of record $90M in Ontario, Canada.

From: Lotto Max<espinozasilvia65@cqeoyl17.meudrive.eu.org> Subject: Lotto Max Giveaway – Claim Your Home Depot Gift Card

Phishing Link

1. http://xn--vqcebxeqf-95a2o93b.chinadailymail.com/xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked

Example Phishing email from Geek Squad with Subject Status update notice For Order Number

For the record, this is a Geek Squad phishing email attempt that is recently going around, with subject "Status update notice For #Order xxxx"

What to do?  Report them, go to bottom of page. 

From: Geek Squad<mdraaz213171@gmail.com> Subject: Status update notice For #Order xxxx Geek Squad Order Date: Monday, September 21, 2026 Order No: Hi This notice confirms the upcoming automatic renewal of your membership. To ensure continuous service without interruption, your plan is scheduled to renew for an additional 5-Years term. Your extended term is officially active Subscription Details: Renewal ID: Subscription: Geek Squad SecureSphere Ultra Subscription Term: 5-Years Renewal Amount: $390.86 Renewal Method: Automatic Renewal Your primary payment method on file will be charged $390.86 for the upcoming 5-Years membership term. If you wish to continue your membership, no action is required, as your subscription will renew automatically. Please be advised that all account management and support are provided exclusively through our digital customer service channels. In-store support at Best Buy retail locations is not available for these digital account actions. With great respect, Geek Squad Team Service Support: +1 (808) 202-7655 This is an automated system notification. Direct replies to this mailbox are unmonitored.

Phishing Link

1. 1 (808) 202-7655 

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked

Example Phishing email from World Trade Center with Subject Don’t Miss Out: Check Your Eligibility for the 9/11 Fund

For the record, this is a World Trade Center phishing email attempt that is recently going around, with subject "Don’t Miss Out: Check Your Eligibility for the 9/11 Fund"

What to do?  Report them, go to bottom of page. 

From: WTC-Settlements.com<alert@buggioldp.com> Subject: Don’t Miss Out: Check Your Eligibility for the 9/11 Fund

Phishing Link

1. https://buggioldp.com/c/xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked