2018 E-Scams-ISP Alerts

2018 E-Scams

       The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to have been sent by your Internet Service Provider (ISP).

You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar credit card or bank.

If you do receive one of the following emails or a similar email message in your inbox, please avoid opening any attachments and delete the email.

NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of the large amount of scam emails that are circulating.


11-19-2018 Phishing Email

Subject: RE:  Shoe Boxes
Date: 2018-11-19 09:41
 From: customer@yourisp.com
To: customer@yourisp.com


The file for your review is attached below.

You can contact me with any questions you have, do let me know.

ATTACHMENT DOCUMENT (malicious attachment)

Thanks You

Customer had a test in Your Town yesterday, so I took them up there.
Customer name

On 2018-11-14 19:15, Customer wrote:

Did we find anyone to take the boxes?

Customer signature

(malicious link)

11-19-2018 Phishing Email

From: Your ISP Verification Team <suport@yourisp.net> 
Sent: Monday, November 19, 2018 1:30 AM
To: customer@yourisp.net
Subject: Your ISP Email Alert !!

Dear ISP User, 
Due to congestion in our mail server, all unverified accounts would be shut down so to verify this account (customer@yourisp.net) is active, complete the email verification below:
Please, click Reply before filling info.
*Full Name:
*Email Address: customer@yourisp.net
*Reconfirm Password:   
Thank you for using your ISP Email!  
                                                                  Copyright 2018, Your ISP Inc., All Rights Reserved.

11-06-2018 Ransom Email

Subject: Your Account Has Been Hacked 
Date: 2018-11-06 

Hello! My nickname in darknet is nevil92.I hacked this mailbox more than six months ago, through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time. If you don't belive me please check 'from address' in your header, you will see that I sent you an email from your mailbox. Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer and automatically saved access for me. I have access to all your accounts, social networks, email, browsing history. Accordingly, I have the data of all your contacts, files from your computer, photos and videos. I was most struck by the intimate content sites that you occasionally visit. You have a very wild imagination, I tell you! During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching. Oh my god! You are so funny and excited! I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $583 is quite a fair price to destroy the dirt I created. Send the above amount on my BTC wallet (bitcoin): 19D67Tgb3neJiTHd8pZDEBYmUn2qSjxEeB As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it. Otherwise, these files and history of visiting sites will get all your contacts from your device. Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it! Since reading this letter you have 50 hours! After your reading this message, I'll receive an automatic notification that you have seen the letter. I hope I taught you a good lesson. Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!

 Good luck!

11-06-2018 Malicious links

Subject: Approved Your Application
From: Sarapit <jijom@patonce.com>
To: user@yourisp.net

Good News,
Thank you for submitting your application.
You have been selected for our project.
Check Our Guidelines
Before starting please read our guidelines
and  agreement document carefully.
Review Agreement Letter
You must agree to our terms & conditions.
Once again, this offer will end very soon.
Thank you.
- Susan M. Sauer
For more details about    Job Facilities

9-12-2018 Malicious attachment

Subject: EMAIL DELIVERY FAILURE: Email Account youraccount@yourisp.net UPGRADE REQUIRED !!!
To: user@yourisp.net


Hello <your username>,

YourISP.com servers have experienced failure in the delivery of your previous emails as you have not been able to meet up with the recent YourISP.com verification task.

Your youremailaddress@yourisp.com needs to be upgraded and verified to avoid email service suspension.

To continue using your mailbox, you need to upgrade and verify your mailbox. This service is free.

Click Here To Proceed$B!*(Jick Here To Proceed$B!*(J

Once the upgrade is complete, your mailbox will work effectively.

Office365 yourisp.com Email provider! © 2018 All rights reserved.

8-29-2018 Malicious links

Subject: DE-ACTIVATION OF YOUR MAILBOX by server admin
Date: 2018-08-29 06:04
From: Server Admin <admin@spammer.com>



Dear yourisp.net,

We received an instruction few hours ago to terminate your email account

(yourisp.net) from our server.

You need to confirm you made this request or we will continue with the request.

But if you think it is an error, take action immediately to stop this process, else your email will be closed shortly.

If you are sure you gave this instruction for your account termination, please click ignore this warning and your request will be processed shortly!

Thank You,


8-07-2018 Malicious links

Your Password Expires Today. You are hereby directed to click on ITS HELPDESK to update your password to continue with your mailbox and follow instructions. Failure to comply with these guidelines may result in a loss of access to your Webmail account. Kindly use the link above to complete your Web-mail User authentication form.




© Copyright 2018.

All Rights Reserved

4-16-2018 Malicious links

Subject: yourisp.net Server Notification!
Date: 04/16/2018 12:48
From: yourisp.net  <noreply@noreply.com>
To: user@yourisp.net


Your account will be suspended due to mail violation

Want to retain our service?

                * Kindly Follow to verify to log in and fill in recovery details


4-16-2018 Malicious links

Based on customers feedback, we've improved


Dear Valued Customer

Your ISP has launched a new messaging platform today April 13th 2018, which combines Email, Contacts and Calendar into an easy to use interface. The new version lets you manage your ISP communication email from any computer, tablet, or smartphone with Internet access.

Please Enhance to the newest version to continue using Your ISP, Click the below link to Enhance to new version 9.0


What’s different in the new version?

This version of Web-mail includes an upgraded interface, enhancements to many existing features, and additional features that were not previously available in Web-mail Classic. We know that change can be difficult and we want to make the transition as smooth as possible.

Plus you'll get:

Increased email storage with up to 1TB

Faster page and email load times

More functional search feature

Increased security

Supports the latest web browsers and plug-ins (IE, Firefox and Safari)

Thank you for using my Your ISP Telecommunications for your communication needs. We value your business and look forward to serving you!

© 2018 Your ISP Telecommunications. All Rights Reserved.

4-10-2018 Malicious links

Date: 04/10/2018 9:46
 From: "ADMINISTRATOR" <elbecker@spammer.com>
Dear Valued ISP Customer:

This is a feedback from your earlier request with instruction to close your yourisp.com account.
Note your request are now been processed, we need you to confirm the account closure request by clicking this link here.
www.webmail.maliciouslink.com/account/closure/request.html [1]_
If you didn't initiate the account closure request, Click Cancel Account Closure Request button immediately and login with your e-mail to cancel request.
Cancel Close Account Request [2]
Failure to cancel this request your account will be automatically close after 24hours
NOTIC Tier II Technician
Department Support Specialist
[1] http://saucygirlskitchen.com/yourisp/ispdomain.html
[2] http://saucygirlskitchen.com/yourisp/ispdomain.html
3-19-2018 Malicious attachment (contains 2 malicious file attachments)

Subject: Resource limits exceeded on : yourisp.net
Date: 2018-03-18 21:39
From: cPanel <accounts@cpanel.net>
To: info@yourisp.net

Domain: yourisp.net, 

You ran into the resource limits of your hosting package within the past 24 hours. This means that your website needs more resources than your package currently offers. In order for your website to run smoothly, we recommend that you to automatically add more resources to your hosting package now. To avoid hosting performance hindrance and service interruption 

NOTE: Your Domain: goldenwest.net will be Disable if additional
resources is not added 

Copyright(c) 2018 cPanel, Inc