2018 E-Scams-ISP Alerts

2018 E-Scams

                  The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to have been sent by your Internet Service Provider (ISP).

You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar credit card or bank.

If you do receive one of the following emails or a similar email message in your inbox, please avoid opening any attachments and delete the email.

NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of the large amount of scam emails that are circulating.

12/27/2018 Malicious Link
From: Unknown Sender
Sent: Wednesday, December 26, 2018 3:57 PM
To: ISP Customer
Subject: Congratulations! 


12/17/2018 Virus
Someone You Know Christmas Greeting Card
Date: 2018-12-17 09:05
From:  Email Address with Someone You Know As The Sender
To:  NA


A little smile, a word of cheer a bit of love from someone near a

little gift from one held dear, best wishes for the coming year.

Wishing you a very Merry Christmas.

Greeting Card is attached.


"Someone You Know"
555-555-5555 O 555-555-5555 F
E:Someone You know@xxxdomain.com

We make a living by what we get but we make a life by what we give.

Winston Churchill

12/05/2018 Virus
Subject Review invoice required 
Date: 2018-12-05 07:37 a.m.
From:  Random Email Address with Your Name As The Sender
To:  NA

Good Day all,
I have checked your account and all allocations agree with your remittances.
The payment made on November 14 2018 was to pay October invoices for $597.32 outstanding
Which was agreed when account details were changed
I have attached the November invoice.
Thanks and best Regards

12/04/2018 Malicious Links/Phishing
Subject: System server message
Date: 2018-12-04 11:50
Fromi: exports@randomisp
To:: youremail@yourisp.com

Blocked Incoming Messages  POSTMASTER TOOLS
Postmaster@ (Malicious Link Removed)

You have more than 8 incoming messages that could not be delivered to: youremail@yourisp

For further instructions on how to correct or report this error,

please click: Release Messages (Malicious Link removed)

© 2018 Webmaster Services Limited and affiliates.
Note: This message was sent by the system for notification only. Please do not reply.
If this message lands in your spam folder, please move it to your inbox folder for proper interagtion:
Click Here (Malicious Link Removed)

12/04/2018 Malicious Links

Subject: RE:  Please validate and retrieve youremail@yourisp.com
Date: 2018-12-04 11:50
To:: youremail@yourisp.com

User youremail@yourisp.com

Due to the Routine checks on the mail servers some of your mails are on pending status

Please validate and retrieve mail(s).

(Malicious link removed) 

Also, Enter details once and correctly, then wait for response from Our Server.

Support Team

11-19-2018 Phishing Email

Subject: RE:  Shoe Boxes
Date: 2018-11-19 09:41
 From: customer@yourisp.com
To: customer@yourisp.com


The file for your review is attached below.

You can contact me with any questions you have, do let me know.

ATTACHMENT DOCUMENT (malicious attachment)

Thanks You

Customer had a test in Your Town yesterday, so I took them up there.
Customer name

On 2018-11-14 19:15, Customer wrote:

Did we find anyone to take the boxes?

Customer signature

(malicious link)

11-19-2018 Phishing Email

From: Your ISP Verification Team <suport@yourisp.net> 
Sent: Monday, November 19, 2018 1:30 AM
To: customer@yourisp.net
Subject: Your ISP Email Alert !!

Dear ISP User, 
Due to congestion in our mail server, all unverified accounts would be shut down so to verify this account (customer@yourisp.net) is active, complete the email verification below:
Please, click Reply before filling info.
*Full Name:
*Email Address: customer@yourisp.net
*Reconfirm Password:   
Thank you for using your ISP Email!  
                                                                  Copyright 2018, Your ISP Inc., All Rights Reserved.

11-06-2018 Ransom Email

Subject: Your Account Has Been Hacked 
Date: 2018-11-06 

Hello! My nickname in darknet is nevil92.I hacked this mailbox more than six months ago, through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time. If you don't belive me please check 'from address' in your header, you will see that I sent you an email from your mailbox. Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer and automatically saved access for me. I have access to all your accounts, social networks, email, browsing history. Accordingly, I have the data of all your contacts, files from your computer, photos and videos. I was most struck by the intimate content sites that you occasionally visit. You have a very wild imagination, I tell you! During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching. Oh my god! You are so funny and excited! I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $583 is quite a fair price to destroy the dirt I created. Send the above amount on my BTC wallet (bitcoin): 19D67Tgb3neJiTHd8pZDEBYmUn2qSjxEeB As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it. Otherwise, these files and history of visiting sites will get all your contacts from your device. Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it! Since reading this letter you have 50 hours! After your reading this message, I'll receive an automatic notification that you have seen the letter. I hope I taught you a good lesson. Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!

 Good luck!

11-06-2018 Malicious links

Subject: Approved Your Application
From: Sarapit <jijom@patonce.com>
To: user@yourisp.net

Good News,
Thank you for submitting your application.
You have been selected for our project.
Check Our Guidelines
Before starting please read our guidelines
and  agreement document carefully.
Review Agreement Letter
You must agree to our terms & conditions.
Once again, this offer will end very soon.
Thank you.
- Susan M. Sauer
For more details about    Job Facilities

9-12-2018 Malicious attachment

Subject: EMAIL DELIVERY FAILURE: Email Account youraccount@yourisp.net UPGRADE REQUIRED !!!
To: user@yourisp.net


Hello <your username>,

YourISP.com servers have experienced failure in the delivery of your previous emails as you have not been able to meet up with the recent YourISP.com verification task.

Your youremailaddress@yourisp.com needs to be upgraded and verified to avoid email service suspension.

To continue using your mailbox, you need to upgrade and verify your mailbox. This service is free.

Click Here To Proceed$B!*(Jick Here To Proceed$B!*(J

Once the upgrade is complete, your mailbox will work effectively.

Office365 yourisp.com Email provider! © 2018 All rights reserved.

8-29-2018 Malicious links

Subject: DE-ACTIVATION OF YOUR MAILBOX by server admin
Date: 2018-08-29 06:04
From: Server Admin <admin@spammer.com>



Dear yourisp.net,

We received an instruction few hours ago to terminate your email account

(yourisp.net) from our server.

You need to confirm you made this request or we will continue with the request.

But if you think it is an error, take action immediately to stop this process, else your email will be closed shortly.

If you are sure you gave this instruction for your account termination, please click ignore this warning and your request will be processed shortly!

Thank You,


8-07-2018 Malicious links

Your Password Expires Today. You are hereby directed to click on ITS HELPDESK to update your password to continue with your mailbox and follow instructions. Failure to comply with these guidelines may result in a loss of access to your Webmail account. Kindly use the link above to complete your Web-mail User authentication form.




© Copyright 2018.

All Rights Reserved

4-16-2018 Malicious links

Subject: yourisp.net Server Notification!
Date: 04/16/2018 12:48
From: yourisp.net  <noreply@noreply.com>
To: user@yourisp.net


Your account will be suspended due to mail violation

Want to retain our service?

                * Kindly Follow to verify to log in and fill in recovery details


4-16-2018 Malicious links

Based on customers feedback, we've improved


Dear Valued Customer

Your ISP has launched a new messaging platform today April 13th 2018, which combines Email, Contacts and Calendar into an easy to use interface. The new version lets you manage your ISP communication email from any computer, tablet, or smartphone with Internet access.

Please Enhance to the newest version to continue using Your ISP, Click the below link to Enhance to new version 9.0


What’s different in the new version?

This version of Web-mail includes an upgraded interface, enhancements to many existing features, and additional features that were not previously available in Web-mail Classic. We know that change can be difficult and we want to make the transition as smooth as possible.

Plus you'll get:

Increased email storage with up to 1TB

Faster page and email load times

More functional search feature

Increased security

Supports the latest web browsers and plug-ins (IE, Firefox and Safari)

Thank you for using my Your ISP Telecommunications for your communication needs. We value your business and look forward to serving you!

© 2018 Your ISP Telecommunications. All Rights Reserved.

4-10-2018 Malicious links

Date: 04/10/2018 9:46
 From: "ADMINISTRATOR" <elbecker@spammer.com>
Dear Valued ISP Customer:

This is a feedback from your earlier request with instruction to close your yourisp.com account.
Note your request are now been processed, we need you to confirm the account closure request by clicking this link here.
www.webmail.maliciouslink.com/account/closure/request.html [1]_
If you didn't initiate the account closure request, Click Cancel Account Closure Request button immediately and login with your e-mail to cancel request.
Cancel Close Account Request [2]
Failure to cancel this request your account will be automatically close after 24hours
NOTIC Tier II Technician
Department Support Specialist
[1] http://saucygirlskitchen.com/yourisp/ispdomain.html
[2] http://saucygirlskitchen.com/yourisp/ispdomain.html
3-19-2018 Malicious attachment (contains 2 malicious file attachments)

Subject: Resource limits exceeded on : yourisp.net
Date: 2018-03-18 21:39
From: cPanel <accounts@cpanel.net>
To: info@yourisp.net

Domain: yourisp.net, 

You ran into the resource limits of your hosting package within the past 24 hours. This means that your website needs more resources than your package currently offers. In order for your website to run smoothly, we recommend that you to automatically add more resources to your hosting package now. To avoid hosting performance hindrance and service interruption 

NOTE: Your Domain: goldenwest.net will be Disable if additional
resources is not added 

Copyright(c) 2018 cPanel, Inc