Password Expiration Notification Scam

This has all the indications of being a scam e-mail, a password has expired and you need to click on a link to retain your existing password. The senders e-mail name might suggest it is to do with your e-mail account but if you are careless and in a rush you might just click on the given link.

As I have said before pause and consider whether it has the characteristics of a scam... Untypical sender e-mail address and links and the urgency of taking "action" being stressed in the e-mail.

E-Mails received:

Date: 10/04/2025, 17:00

From: Webmail Services support@yourelitetcs.com

To: [Name and E-Mail address redacted]

Subject: ***SPAM*** Important: Account Security

Notes

Senders e-mail: support@yourelitetcs.com, strange domain name, the domain name was registered a year previous to receiving the e-mail and there are full whois registrant details on the whois. The physical address given however is for a firm of NY lawyers (https://www.braverlaw.net/contact-us/).

Link address: http://124.43.130.40/CMS/templates/b/#[E-Mail address redacted], again cause for concern. The e-mail address at the foot of the e-mail (I have redacted the e-mail name displayed as it does not match the actual e-mail address) would send an e-mail to support@appriver.com. Appriver.com is a cybersecurity firm... I am not sure why that e-mail link is there except perhaps to add credibility to the e-mail.

 

Recommendation:

Just delete the e-mail, don't click on any links.

 

Another supposed password expiration e-mail was received:
 

Date: [No date]

From: no-reply@our-domain

To: [our-email-address redacted]

Subject: ***SPAM*** [our-email-address redacted]: Please confirm to continue

[Our domain name]Mail

Hi

Please note [our-email-address redacted] authentication expires 09 May, 2025.

Please continue to keep or change your password.

Regards,
[Our domain redacted] Mail

Notes: One of those e-mails that has been spoofed to look like it has come from your e-mail domain. The "continue" link linked to https://is.gd/Fwuoww/#b2ZmaWNlQG5ld2JvbGRiYXB0aXN0Lm9yZy51aw== < > is.gd being a website address shortener so it could take you anywhere

 

Recommendation:

Just delete the e-mail, don't click on any links

 

 

 

Michael Fowler

 

 

Other articles by Michael Fowler:

McAfee Renewal Scam - Michael Fowler
Two days running I received this e-mail. I don't use McAfee but this isn't a genuine e-mail sent in error by McAfee but an e-mail sent by scammers...   more >>

Amazon Shipment Update Scam - Michael Fowler
I received four Amazon shipping update scams in quick succession. How do I know they are scams? First I do not have an Amazon account or buy anything through Amazon but if I did just follow the simple rules...   more >>

DHL Shipment Update Scam - Michael Fowler
I received the following e-mail supposedly referring to a DHL shipment en-route to me. I have no expectation that any shipment is en-route to me from DHL or any other carrier...   more >>

Vera Elasquez - Content Researcher and Freelance Journalist - Michael Fowler
This lady found my writing "exceptionally insightful. Your writing is not just informative, but truly illuminating on the subject. The clarity and depth of your research are remarkable"...   more >>