chedglow.com

I received a suspicious email that appears to be a phishing attempt involving a fake “confidential employee document.” The email claimed to be related to “Toffeeup corp Confidential Employee Document” and included an attachment with a similar name. It appeared to be sent from an internal HR-related source (“HR_Operation_Portall”), but the actual sender email address did not match the company domain and instead used an unrelated external domain (chedglow.com). The message was formatted to look like a legitimate internal communication and included multiple recipients to increase credibility. The subject line and attachment name suggested sensitive or confidential information, which could pressure recipients into opening the file. Key red flags included: Mismatch between the displayed sender name and the actual email domain Unexpected attachment labeled as “confidential employee document” No prior notice or context for receiving such a document External email address posing as an internal HR or corporate system This appears to be a phishing attempt designed to trick recipients into opening a malicious attachment or trusting a fraudulent source. I did not open the attachment or interact with the message. I am reporting this to help others recognize similar scams involving fake internal documents and impersonated HR communications. [BBB Scam Type: Phishing] [Business: Chedglow] [Location: TX, USA - 78737]