Wednesday, October 28, 2026

Example Phishing email from Lotto Max with Subject Lotto Max Giveaway – Claim Your Home Depot Gift Card


For the record, this is a Lotto Max 
phishing email attempt that is recently going around, with subject "Lotto Max Giveaway – Claim Your Home Depot Gift Card
"

What to do?  Report them, go to bottom of page. 

This email was riding the wave of a recent Lotto Max prize of record $90M in Ontario, Canada.




From: Lotto Max<espinozasilvia65@cqeoyl17.meudrive.eu.org>

Subject: Lotto Max Giveaway – Claim Your Home Depot Gift Card







Phishing Link

1. 
http://xn--vqcebxeqf-95a2o93b.chinadailymail.com/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Monday, October 26, 2026

Example Phishing email from Geek Squad with Subject Status update notice For Order Number


For the record, this is a Geek Squad 
phishing email attempt that is recently going around, with subject "Status update notice For #Order xxxx
"

What to do?  Report them, go to bottom of page. 





From: Geek Squad<mdraaz213171@gmail.com>

Subject: Status update notice For #Order xxxx



Geek Squad

Order Date: Monday, September 21, 2026
Order No:

Hi

This notice confirms the upcoming automatic renewal of your membership. To ensure continuous service without interruption, your plan is scheduled to renew for an additional 5-Years term.

Your extended term is officially active

Subscription Details:

Renewal ID:
Subscription: Geek Squad SecureSphere Ultra
Subscription Term: 5-Years
Renewal Amount: $390.86

Renewal Method: Automatic Renewal

Your primary payment method on file will be charged $390.86 for the upcoming 5-Years membership term. If you wish to continue your membership, no action is required, as your subscription will renew automatically.

Please be advised that all account management and support are provided exclusively through our digital customer service channels. In-store support at Best Buy retail locations is not available for these digital account actions.

With great respect,
Geek Squad Team
Service Support: +1 (808) 202-7655

This is an automated system notification. Direct replies to this mailbox are unmonitored.




Phishing Link

1. 
1 (808) 202-7655 


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Saturday, October 24, 2026

Example Phishing email from World Trade Center with Subject Don’t Miss Out: Check Your Eligibility for the 9/11 Fund


For the record, this is a World Trade Center 
phishing email attempt that is recently going around, with subject "Don’t Miss Out: Check Your Eligibility for the 9/11 Fund"

What to do?  Report them, go to bottom of page. 





From: WTC-Settlements.com<alert@buggioldp.com>

Subject: Don’t Miss Out: Check Your Eligibility for the 9/11 Fund






Phishing Link

1. 
https://buggioldp.com/c/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Friday, October 23, 2026

Example Phishing email from Cloud Support Team with Subject Re: Vérifiez votre espace de stockage dans le cloud


For the record, this is a Cloud Support Team 
phishing email attempt that is recently going around, with subject "Re: Vérifiez votre espace de stockage dans le cloud"

What to do?  Report them, go to bottom of page. 





From: L’espace de stockage est saturé<espinozasilvia11@directwaterfall1111.szex.eu.org>

Subject: Re: Vérifiez votre espace de stockage dans le cloud

















Phishing Link

1. 
http://xn--gybseumyk-95a2o93b.nuochoangoisao.com/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Thursday, October 22, 2026

Example Phishing email from CAA Member Care with Subject This Could Save Your Life on Canadian Roads Claim Your Tool Now


For the record, this is a CAA Member Care 
phishing email attempt that is recently going around, with subject "This Could Save Your Life on Canadian Roads Claim Your Tool Now"

What to do?  Report them, go to bottom of page. 



From: CAA Member Care<notification.tuvm@mdc.org.co>

Subject: Endurance Auto Protection: Get your free vehicle protection quote today















Phishing Link

1. 
http://4.xn--vnxbflwwnskd-3rakc13flad80s.cecclphs.com/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Tuesday, October 20, 2026

Example SPAM Email from Freedom Debt Relief with Subject Debt Relief Experts Ready to Assist You


For the record, this is a 
Freedom Debt Relief spam email attempt that is recently going around, with subject "Debt Relief Experts—Ready to Assist You"

What to do?  Report them, go to bottom of page. 





From: Freedom Debt Relief - Ad Partner<alert@clesbase.com>

Subject: Debt Relief Experts—Ready to Assist You




Spam Link

1. https://clesbase.com/c/xxxx

How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Monday, October 19, 2026

How to stop zero-click AdFection spyware - Turning off Javascript in Chrome


The 
first public technical confirmation of a zero-click mercenary spyware attack delivered via targeted advertising, which we call AdFection is out. 


The full report at UofT's Citizen Lab
Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab

BTW: The operations of the cyber-attack company Candiru have been sold to the investment fund American investment fund Integrity Partners for up to $30 million. According to an agreement signed several months ago, the fund purchased Candiru’s assets and transferred them—along with all of the company's employees—to a new entity that is not subject to U.S. government sanctions.
Trivia: The vampire fish in Brazil, more accurately known as the Candiru, is a small, parasitic catfish infamous for its habit of entering the gills of larger fish to feed on their blood.

Here's how to stop getting infected

To disable JavaScript for all websites in Google Chrome, follow these steps:

  1. Open Chrome.

  2. Copy and paste this address into the address bar:

    chrome://settings/content/javascript

  1. Press Enter.

  2. Select Don't allow sites to use JavaScript or switch the JavaScript permission toggle off, depending on your Chrome version.
















5. Close Settings and reload any open websites by pressing Ctrl + R.

To verify: Return to chrome://settings/content/javascript and confirm that JavaScript is blocked by default.

Note: This setting applies to all websites unless you add individual site exceptions. Some websites, including banking sites, login pages, and CAPTCHA systems, may not function properly.


6. To re-enable JavaScript per site, click <x> to add site to allow JavaScript (whitelist). 







Sunday, October 18, 2026

Example Phishing email from generic Cloud company with Subject Your storage is full. Deletion in progress


For the record, this is a cloud 
phishing email attempt that is recently going around, with subject "Endurance Auto Protection: Get your free vehicle protection quote today".

What to do?  Report them, go to bottom of page. 



From: Endurance Auto Protection<alert@propriata.com>

Subject: Endurance Auto Protection: Get your free vehicle protection quote today













Phishing Link

1. https://propriata.com/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Saturday, October 17, 2026

Example SPAM Email from Pharmacy2U with Subject Get your NHS repeat prescriptions the easy way with Pharmacy2U


For the record, this is a 
Window Nation spam email attempt that is recently going around, with subject "Get your NHS repeat prescriptions the easy way with Pharmacy2U"

What to do?  Report them, go to bottom of page. 



From: Online Pharmacy<contact@xg66888.com>

Subject: Get your NHS repeat prescriptions the easy way with Pharmacy2U




Spam Link

1. https://www.xg66888.com/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Friday, October 16, 2026

Example SPAM Email from Window Nation with Subject Beautiful New Windows - Installed Fast


For the record, this is a 
Window Nation spam email attempt that is recently going around, with subject "Beautiful New Windows - Installed Fast"

What to do?  Report them, go to bottom of page. 



From: Window Nation<alert@ebstretas.com>

Subject: Beautiful New Windows - Installed Fast







Spam Link

1. https://ebstretas.com/c/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked






Thursday, October 15, 2026

Example SPAM Email from Metal Roofing Innovations with subject Are These Affordable Metal Roofs Available in Your Area?


For the record, this is a 
Metal Roofing Innovations spam email attempt that is recently going around, with subject "Are These Affordable Metal Roofs Available in Your Area?"

What to do?  Report them, go to bottom of page. 




From: Metal Roofing Innovations Promotion<alert@reximant.com>

Subject: Are These Affordable Metal Roofs Available in Your Area?




Spam Link

1. https://reximant.com/c/xxxx


How to tell this is a Phishing email?

  1. Check email address in full, if it's not from originating company then it's phishing.
  2. Hover over all links in email, if it's not from the company's website then forget it.
  3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source
  1. Outlook.com->Actions->View Message Source. 
  2. Gmail.com->More (down arrow to top right)->Show original.
Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------


Report Phishing Email (not as Spam)

  1. Outlook.com->Junk (at Top)->Phishing Scam
  2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

  1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

  1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, Digital Ocean) and ISPs

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------



💣 📧 Check if your username or email has been hacked