The phishing sender construed a lengthy correspondence thread that was supposedly with our CEO and w ...
show moreThe phishing sender construed a lengthy correspondence thread that was supposedly with our CEO and was forwarded to our accountant. The sender posed as: Paula Johnson, CEO | Paula Johnson Consulting, [email protected]. It was actually sent from the nifty.com domain at the 106.153.226.35 IP address, which is in Japan.
show less
A sending using this IP address sent an unrequested "Review Document" email, via an unencrypted conn ...
show moreA sending using this IP address sent an unrequested "Review Document" email, via an unencrypted connection to our email server.
Mar 24, 2025, 7:33:00 AM Received from an SMTP server with IP address: 153.127.234.81 (Not encrypted)
Text of message:
You recieved a document to review and sign.
REVIEW DOCUMENT
Hello XX,
Please sign Addendum to Agreement_xxxxx_028363_Docx. Electronically on Monday-March-2025 10:32 AM by following the instructions that appear when you click the link to review the document.
Once all the signatories have signed you will receive by email a copy of the completed Agreement
Link:
https://events.trustifi.com/api/o/v1/click/67e164e759c4cd1bdb0fe1ed/fff2f3/67014e/3ccf0b/bf6fb9/0a1a43/11c565/a4c2cd/94e449/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/86dc73/cd36d7/d2cba0/eaae50/7846c1/c489a2/f74407/f35115/3bd0b8/a6d147/1cdf73/33d5a2/cab4f2/c11ac8/db715b/d84c60/9e346c/7b564f/fb3b55/312a1c/3d5f7a/676c4f/ad8855/83bbbf/0cf1b2/677393/962d0f/b68d1d/ba8bbf/3606c6/997b2c/c90173/2
show less
Sender at [email protected] spoofed an employee's email address, but not completely. ...
show moreSender at [email protected] spoofed an employee's email address, but not completely. Sender requested our bookkeeper to change paycheck direct-deposit information.
show less
Received a text to my phone from a strange, non-US number: 639129518448
"Since the package does ...
show moreReceived a text to my phone from a strange, non-US number: 639129518448
"Since the package does not have a house number, the package transportation is interrupted, please update. https://urxecqr.com "
show less
Scam is disguised as a legitimate-looking but fake Microsoft Security Policy.
Dear User, your 2fa s ...
show moreScam is disguised as a legitimate-looking but fake Microsoft Security Policy.
Dear User, your 2fa security authentication expires today. We recommend you review to keep accessing your account and avoid login interruption.
Review Password (button)
This link expires in 48hours
This email was sent from an unmonitored mailbox. You are receiving this email because you have subscribed to Microsoft Office 365. Privacy Statement (missing)
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA
show less
Phishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.