Registration Record Update Scam
A "Universal Account Phishing Scam", you are not told what internet account this refers to only that you need to rectify a "registration record we hold has an open update from a routine records review" whatever that load of balony means.
E-mail received
Date: 18/09/2026, 15:30
From: dirkx alpis dirkxgalpistde@outlook.com
To: [Name and Email address redacted]
Subject: The registration record we hold has an open update from a routine records review
Notes:
This email was received at an email address that is not used for any active accounts so immediately we knew this was a scam. It came from a free email provider outlook.com which would not be used by any legitimate businesses. I always say this, some legitimate businesses do use free email providers to send emails but these usually are small one man businesses such as builders and plumbers.
Let's look at some of the text... "Your registration record is part of this year's update round, which brings all records in line with the updated UK data requirements. The record needs the current details entered to finish." I think I will risk ignoring UK data requirements.
This is of course the important part... "Complete the step below so the record is finished on time. A card is all you need." - They want your bank card details.
The click through link is to https://mayavanlines.com/backups/index.php, using a sandbox browser we discovered the visitor to that site was redirected to https://evechicsgbseons.com/SK55R5/start, all very suspicious but certainly a fake login page to harvests your details. Whois records for the second domain shows that it was only registered on the 18th Sept 2026, the same day the email was sent to us.
Recommendation: Do not click on any links, Delete email.
Michael Fowler
Other articles by Michael Fowler:
cPanel Domain Deactivation Scam - Michael Fowler
The scammers rely on a misconception of what cPanel is and what it does. cPanel is not a webhosting or email hosting service that can decide to deactivate domains or dormant accounts. cPanel is a software interface that facilitates activities within an established web/email hosting account... more >>
Hargreaves Lansdown Update Profile Scam - Michael Fowler
I would have hoped that if an individual was financially savvy to have a Harsgreave Landsdown and invest in stocks, shares and other financial instruments through the company that they would recognise this phishing attempt from scammers... more >>
Message Restriction Activity Phishing Scam - Michael Fowler
I was impressed by the choice of the green colour for the heading text, a change from the orange colour used in cPanel scams. A minimalist message with an ominous though perhaps not too ominous Message Restriction Activity. What is that but an opportunity to access your email account and use it for untoward purposes... more >>