Remove “Server Support” email

The “Server Support” email is a phishing attempt that aims to steal email credentials. It’s a fairly generic phishing attempt and is disguised as a notification from the email provider. The email informs you that an email has been “withheld by server” because of insufficient space. The email has two buttons: to either download the pending emails or increase storage. However, the email links to a phishing site. If you interact with the email and type in your passwords on the phishing site, the password will be stolen by the malicious actors operating this phishing campaign. This could lead to your account being taken over by cybercriminals.

 

 

This phishing attempt is fairly generic, notifying users that their email accounts are low on storage and warning incoming and outgoing emails will be withheld as a result. The email has “Download Pending Emails” and “Increase Storage” buttons, urging users to click to supposedly increase their storage and download the already pending emails. However, clicking on either of the buttons redirects them to a phishing site claiming that they need to log in to their email account.

Though the phishing site may not appear convincing, it can still deceive users unfamiliar with the signs of phishing websites. If users enter their email credentials on this site, the malicious actors behind the scam will immediately capture them. These compromised credentials could then be used to hijack accounts or sold to other cybercriminals on hacker forums.

Email credentials are extremely valuable to cybercriminals for many reasons. Some email accounts often contain a lot of personal information, as many users retain their email accounts for years, accumulating personal messages and important documents like receipts and invoices. Additionally, email accounts are often linked to numerous other accounts, giving malicious actors the opportunity to take over those as well.

The full text from the “Server Support” phishing email is below:

Subject: Undelivered Mail Returned to Sender

Server Support For: –

Your 1 Incoming & Outgoing messages are withheld by server due to storage insufficient space.

Actions Required Below.
Download Pending Emails Increase Storage

© -. All rights reserved 2025.

How to spot a phishing attempt

Generic phishing emails are often easy to recognize, but when tailored with personal details to target someone specifically, they can be deceptive. Fortunately, most general phishing emails are pretty obvious, as is the case with “Server Support” phishing email. It has all the usual phishing signs, so if you know what to look for, you should be able to immediately identify the “Server Support” email as malicious.

When you get an unsolicited email with an attachment or link, your first step should be to check the sender’s email address. If it looks odd or nonsensical, just delete it. However, some phishing emails come from less suspicious-looking addresses. Cybercriminals use tricks like replacing characters, such as “rn” instead of “m,” or adding extra letters to make them appear legitimate. So, always examine the email addresses carefully, even if the emails seem to come from a known sender. In this case, the “Server Support” email is clearly from a fake address as it does not use a legitimate domain. All emails from your email service provider will be sent from an email address that ends in the provider’s name.

Another giveaway is bad grammar and spelling. Emails claiming to be official but full of mistakes are likely spam or malicious. For instance, the “Server Support” email is very brief but has several glaring mistakes in it.

If an email contains a link asking you to log in, be cautious. Hover over the link to check where they will lead you if you were to click on them. The “Server Support” email, for example, leads to a fake login page that isn’t convincing, and the URL exposes the phishing attempt. Even if the site looked authentic, always verify the URL before logging in. Finally, it’s safer to access accounts manually rather than clicking links or buttons in emails.

Remove “Server Support” phishing email

Delete the “Server Support” email from your inbox and avoid interacting with it—don’t click on any links or try to log in. If you’ve already fallen for this phishing attempt, immediately change your email account password. Enable two-factor authentication for extra security. If you’ve lost access to your account, be sure to unlink the email address from any connected accounts.