Message Restriction Activity Scam
I was impressed by the choice of the green colour for the heading text, a change from the orange colour used in cPanel scams. A minimalist message with an ominous though perhaps not too ominous Message Restriction Activity. What is that but an opportunity to access your email account and use it for untoward purposes.
E-Mails received:
Date: 15/11/2025, 12:08
From: Support emmy@hogonature.com
To: [Name and E-Mail address redacted]
Subject: New Messages
Notes
"Red Flags"
- No "branding" to the actual E-mail provider. Are you sure that your E-mail provider is actually contacting you?
- Sender email address emmy@hogonature.com. the domain hogonature.com does not have a website associated with it and it seems a strange name to be connected with email support.
- Click through website address: https://cadaverine.tehillsglobal.com/wp-content/uploads/jacarandas/index.html#[Email address redacted]. An unlikely address for an isp (internet service provider).
How many "red flags" did you spot?
Recommendation:
Just delete the e-mail, don't click on any links.
Further reading:
Beware: Email On Hold Scam Claims You Have Pending Messages
Michael Fowler
Other articles by Michael Fowler:
Cloud Storage Payment Declined Phishing Scam - Michael Fowler
A "catch-all" phishing scam not mentioning any specific cloud storage platform but urging you to submit bank account payment details to their fake page. They claim to be emailing from a Cloud storage and yet the email address gives the name Cloud-Stockage such sloppiness would not be present if this was a genuine payment declined email for an online account.. more >>
Renewal of W-8BEN Certification Phishing Scam - Michael Fowler
"Our compliance team has identified that your certification has expired or will soon expire. To remain in compliance, you must renew your documentation immediately" That as it may be but the email coming from an email address welcome@zykxdj.com seems suspicious... more >>
DVLA Phishing Scam - Michael Fowler
On first glance this email appears to have come from DVLA the Driver Licencing Authority in the UK but examine the sender email address, inconsistencies in the email and the click through web address and this is a scam email designed to capture your bank debit card details... more >>