Fake login pages and portals built to capture passwords, MFA codes, or session cookies.
View All Tags
We are reaching out to inform you that your domain registration with WordPress.com is approaching its expiration date and requires renewal to maintain active status. A pixel-perfect WordPress.com notice sent from an Italian postmaster mailbox, whose only button points at a German health domain.
Judicial Notice. Case Matter: Tax Dispute / Financeira. Investigating Authority: Renda Tax Department, Government of India. A summons from a tax authority that does not exist, sent from a free Outlook mailbox, still carrying the Portuguese words of the template it was copied from.
Your bank account will be charged $3,520.00. A fake QuickBooks debit alert whose visible Intuit link actually routes through a hijacked mobile-marketing redirect to an attacker-controlled site.
Your document is ready for review. A counterfeit DocuSign notification whose "Review & Sign" button leads to a CDN-hosted credential harvesting page with your own address baked into the link.
Dear Support. You have a fax document from Xerox Scanner. Pages: 2 Full scanned PDF/HTML File. Remote ID: 34455191. Priority Notice - Review Doc_Xerox File Shared
Dear Support. You have a fax document from Xerox Scanner. Pages: 2 Full scanned PDF/HTML File. Remote ID: 34455191. Advice - Remittance 86,000 Process.
We've restricted 7 incoming Inbox messages to info@dewiride.com due to server error. We apologize for delay, check and retrieve them by clicking below link.
We don't recognize the device that was just used to sign in to your Stripe account. If this was you, you don't need to do anything. If you don't recognize it, please let us know.
Missed Call Notification - New VM Recordlng Recelved - MSG 00:01:30 Ref:9b4e56919bf06b17b131774fd036e27fed8e7e00 from intrinsicvccdcsystem@i-ntrinsic.com.
Your account and your wallet have been temporarily blocked to prevent you from losing your assets. Download the attached file to re-activate your wallet.
