Fake McAfee
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 15 Jul 2026 ...
show moreFake McAfee
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 15 Jul 2026 18:50:45 +0200
Authentication-Results: edge.unified.services;
spf=pass (149.210.181.229;lissooula.jpn.com);
dkim=none (nosigs);
dmarc=pass header.from=lissooula.jpn.com (p=none sp=none dis=pass)
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 149.210.181.229
...
<p style="margin: 0 0 15px 0;">
wir möchten Sie darüber informieren, dass Ihr Abonnement für McAfee Total Protection bald ausläuft oder bereits in die Verlängerungsphase übergegangen ist.
show less
fake SERAFE swiss tv taxes
Received: from smtpclienthelo ([100.105.128.12])
by dcdir3-prd-nl1-sun ...
show morefake SERAFE swiss tv taxes
Received: from smtpclienthelo ([100.105.128.12])
by dcdir3-prd-nl1-sun.nl1.unified.services with LMTP
id iEjCNdbmMGqPaBQAUw4nEQ:T5264
(envelope-from <0100019ed33abefd-f9b1a615-0318-4843-8020-8f9145823cd6-000000@atlassian-bounces.atlassian.net>)
for <[email protected]>; Wed, 17 Jun 2026 03:38:24 +0200
Received: from g175-186.smtp-out.amazonses.com ([216.221.175.186])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
Reply-To: <[email protected]>
From: "Serafe AG" <[email protected]>
To: <[email protected]>
References: <[email protected]> <JIRA.78956.1781660255412@ed1ca5ed7b60>
In-Reply-To: <[email protected]>
Subject: =?utf-8?Q?Kontoauszug_f=C3=BCr_Referenz_PAUSE-6?=
=?utf-8?Q?8855?=
Date: Wed, 17 Jun 2026 03:38:23 +
show less
Fake ULYS mail asking for payment Received: from DS7P221CA0038.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8 ...
show moreFake ULYS mail asking for payment Received: from DS7P221CA0038.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8:25e::19) by VI1PR09MB3806.eurprd09.prod.outlook.com (2603:10a6:803:12e::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.16; Sun, 14 Jun 2026 00:36:17 +0000 Received-SPF: Pass (protection.outlook.com: domain of em1929.park.marketing.pbc.gov designates 149.72.120.130 as permitted sender) receiver=protection.outlook.com; client-ip=149.72.120.130; helo=s.wrqvtvvn.outbound-mail.sendgrid.net; pr=C eceived: from s.wrqvtvvn.outbound-mail.sendgrid.net (149.72.120.130) by SA2PEPF000015C8.mail.protection.outlook.com (10.167.241.198) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.8 via Frontend Transport; Sun, 14 Jun 2026 00:36:15 +0000 From: ServiceUIys <[email protected]> Message-ID: <DYHoeJasSXSLbyiBlP9snQ@geopod-ismtpd-44> Subject: Passage au =?UTF-8?B?cMOpYWdl?= non pris en compte
show less
Fake ULYS mail asking for payment
Received: from DS7P221CA0038.NAMP221.PROD.OUTLOOK.COM (2603:10b6: ...
show moreFake ULYS mail asking for payment
Received: from DS7P221CA0038.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8:25e::19) by
VI1PR09MB3806.eurprd09.prod.outlook.com (2603:10a6:803:12e::22) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.16; Sun, 14 Jun
2026 00:36:17 +0000
Received-SPF: Pass (protection.outlook.com: domain of
em1929.park.marketing.pbc.gov designates 149.72.120.130 as permitted sender)
receiver=protection.outlook.com; client-ip=149.72.120.130;
helo=s.wrqvtvvn.outbound-mail.sendgrid.net; pr=C
eceived: from s.wrqvtvvn.outbound-mail.sendgrid.net (149.72.120.130) by
SA2PEPF000015C8.mail.protection.outlook.com (10.167.241.198) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.8
via Frontend Transport; Sun, 14 Jun 2026 00:36:15 +0000
From: ServiceUIys <[email protected]>
Message-ID: <DYHoeJasSXSLbyiBlP9snQ@geopod-ismtpd-44>
Subject: Passage au =?UTF-8?B?cMOpYWdl?= non pris en compte
show less
fake Swiss Touring Club mail
Received: from smtpclienthelo ([100.105.128.43])
by dcdir5-prd-nl1-s ...
show morefake Swiss Touring Club mail
Received: from smtpclienthelo ([100.105.128.43])
by dcdir5-prd-nl1-sun.nl1.unified.services with LMTP
id sPIuAexoK2oApQoAs1GO1A:T5058
(envelope-from <[email protected]>)
for <[email protected]>; Fri, 12 Jun 2026 17:57:45 +0200
Authentication-Results: edge.unified.services;
spf=pass (198.23.158.43;thuvienphapluat.vn);
dmarc=fail header.from=nicolas.chiranti.info (p=none sp=none dis=monitor)
X-Env-Mailfrom: [email protected]
Received: from nicolas.chiranti.info ([198.23.158.43])
From: "Touring-Club" <[email protected]>
Subject: Bestätigung erforderlich
show less
Fake Amazon Prime mail
Received: from DS2PEPF000061C4.namprd02.prod.outlook.com
(2603:10b6:8:45e: ...
show moreFake Amazon Prime mail
Received: from DS2PEPF000061C4.namprd02.prod.outlook.com
(2603:10b6:8:45e:cafe::f) by DS3P221CA0007.outlook.office365.com
(2603:10b6:8:45e::10) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.14 via Frontend Transport; Thu,
11 Jun 2026 21:25:18 +0000
Authentication-Results: spf=pass (sender IP is 159.183.224.107)
smtp.mailfrom=em6922.absistemas.com.br; dkim=pass (signature was verified)
header.d=absistemas.com.br;dmarc=pass action=none
header.from=absistemas.com.br;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of em6922.absistemas.com.br
designates 159.183.224.107 as permitted sender)
receiver=protection.outlook.com; client-ip=159.183.224.107;
Date: Thu, 11 Jun 2026 21:24:51 +0000 (UTC)
From: PrimeVideo <[email protected]>
Mime-Version: 1.0
Message-ID: <v0AcjZjoQgirMCmK4Rv9_w@geopod-ismtpd-20>
show less
Fake McAfee mail
Received: from payeakalbutin.net ([69.162.118.221])
(using TLSv1.3 with cipher T ...
show moreFake McAfee mail
Received: from payeakalbutin.net ([69.162.118.221])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
by mx4-prd-nl1-sun.edge.unified.services with ESMTPS
id XMpVwsotjhdOMXMpVwvObi; Wed, 10 Jun 2026 19:35:05 +0200
Date: Wed, 10 Jun 2026 13:31:11 -0400
From: "McAfee Sicherheits-Partner" <[email protected]>
To: [email protected]
Message-ID: <01020188329e1fb7-eufd30nb-2f3a-4a92-ba1f-nxn6ky91e4on-000000@eu-west-1.amazonses.com>
Subject: Aktualisieren Sie Ihre Zahlungsdaten sicher
show less
FAKE Amazon prime mail
Received-SPF: Pass (protection.outlook.com: domain of em6878.gpsinsight.com
...
show moreFAKE Amazon prime mail
Received-SPF: Pass (protection.outlook.com: domain of em6878.gpsinsight.com
designates 159.183.214.110 as permitted sender)
receiver=protection.outlook.com; client-ip=159.183.214.110;
helo=wfbtdssz.outbound-mail.sendgrid.net; pr=C
Received: from wfbtdssz.outbound-mail.sendgrid.net (159.183.214.110) by
SJ5PEPF00000203.mail.protection.outlook.com (10.167.244.36) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.7
via Frontend Transport; Mon, 8 Jun 2026 00:19:14 +0000
Date: Sun, 07 Jun 2026 22:32:19 +0000 (UTC)
From: PrimeAMZ <[email protected]>
Message-ID: <M7bnR0eARYuzHdrNv5yWyw@geopod-ismtpd-114>
Subject: Votre abonnement Prime a =?UTF-8?B?w6l0w6kgY29uZmlybcOp?=
X-SG-EID:
show less
Received: from PA2PR09MB7077.eurprd09.prod.outlook.com (::1) by
AMBPR09MB8380.eurprd09.prod.outloo ...
show moreReceived: from PA2PR09MB7077.eurprd09.prod.outlook.com (::1) by
AMBPR09MB8380.eurprd09.prod.outlook.com with HTTPS; Sun, 7 Jun 2026 09:51:25
Received: from BN9PR03CA0925.namprd03.prod.outlook.com (2603:10b6:408:107::30)
by PA2PR09MB7077.eurprd09.prod.outlook.com (2603:10a6:102:404::6) 15.21.92.11; Sun, 7 Jun 2026 09:51:25 +0000
Received: from BN3PEPF0000B075.namprd04.prod.outlook.com
(2603:10b6:408:107:cafe::5e) by BN9PR03CA0925.outlook.office365.com
(2603:10b6:408:107::30) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.12 via Frontend Transport; Sun, 7 Jun 2026 09:51:24 +0000
Authentication-Results: spf=pass (sender IP is 159.183.136.207)
smtp.mailfrom=em2762.propumps.co.uk; dkim=pass (signature was verified)
header.d=propumps.co.uk;dmarc=pass action=none
header.from=propumps.co.uk;compauth=pass rea
receiver=protection.outlook.com; client-ip=159.183.136.207;
show less
Fake French Highway Toll invoicing
Received: from BN3PEPF0000B075.namprd04.prod.outlook.com
(2603 ...
show moreFake French Highway Toll invoicing
Received: from BN3PEPF0000B075.namprd04.prod.outlook.com
(2603:10b6:408:107:cafe::5e) by BN9PR03CA0925.outlook.office365.com
(2603:10b6:408:107::30) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.12 via Frontend Transport; Sun, 7
Jun 2026 09:51:24 +0000
Authentication-Results: spf=pass (sender IP is 159.183.136.207)
receiver=protection.outlook.com; client-ip=159.183.136.207;
show less
Received: from smtpclienthelo ([100.105.128.12])
by dcdir4-prd-nl1-sun.nl1.unified.services with L ...
show moreReceived: from smtpclienthelo ([100.105.128.12])
by dcdir4-prd-nl1-sun.nl1.unified.services with LMTP
id wEgwA9nOIGoQPzwAQQcz9A:T1956
(envelope-from <[email protected]>)
for <[email protected]>; Thu, 04 Jun 2026 08:01:43 +0200
Authentication-Results: edge.unified.services;
spf=pass (194.42.96.16;bounce-eu2.crsend.com);
dkim=pass header.d=crsend.com;
dkim=pass header.d=helmexpress.com;
dmarc=pass header.from=helmexpress.com (p=none sp=quarantine dis=pass)
X-Env-Mailfrom: [email protected]
X-SourceIP: 194.42.96.16
Date: Thu, 04 Jun 2026 08:01:42 +0200
CFBL-Feedback-ID: 168279:17165745:105594:168279
From: "Helmexpress" <[email protected]>
CFBL-Address: [email protected]
List-Id: <17165745.168279.crsend.com>
Subject: -15% RABATT AUF ALLES - FLASH SALE
show less
Fake ULYS mail Received: from AMS0EPF000001AE.eurprd05.prod.outlook.com (2603:10a6:20b:656::17) with ...
show moreFake ULYS mail Received: from AMS0EPF000001AE.eurprd05.prod.outlook.com (2603:10a6:20b:656::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.16 via Frontend Transport; Sun, 31 May 2026 21:53:27 Authentication-Results: spf=pass (sender IP is 159.183.224.102) smtp.mailfrom=em8993.cryptoroo.io; dkim=pass (signature was verified) header.d=cryptoroo.io;dmarc=pass action=none header.from=cryptoroo.io;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of em8993.cryptoroo.io designates 159.183.224.102 as permitted sender) helo=s.wfbtzhss.outbound-mail.sendgrid.net; pr=C Received: from s.wfbtzhss.outbound-mail.sendgrid.net (159.183.224.102) by AMS0EPF000001AE.mail.protection.outlook.com (10.167.16.154) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.5 via Frontend Transport; From: ServiceAutoroute <[email protected]> Subject: Erreur lors de votre dernier passage
show less
Fake ULYS mail
Received: from AMS0EPF000001AE.eurprd05.prod.outlook.com
(2603:10a6:20b:656::17) wi ...
show moreFake ULYS mail
Received: from AMS0EPF000001AE.eurprd05.prod.outlook.com
(2603:10a6:20b:656::17) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.16 via Frontend Transport; Sun, 31
May 2026 21:53:27 Authentication-Results: spf=pass (sender IP is 159.183.224.102)
smtp.mailfrom=em8993.cryptoroo.io; dkim=pass (signature was verified)
header.d=cryptoroo.io;dmarc=pass action=none
header.from=cryptoroo.io;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of em8993.cryptoroo.io
designates 159.183.224.102 as permitted sender)
helo=s.wfbtzhss.outbound-mail.sendgrid.net; pr=C
Received: from s.wfbtzhss.outbound-mail.sendgrid.net (159.183.224.102) by
AMS0EPF000001AE.mail.protection.outlook.com (10.167.16.154) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.5 via
Frontend Transport; From: ServiceAutoroute <[email protected]>
Subject: Erreur lors de votre dernier passage
show less
fake SBB mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.unified. ...
show morefake SBB mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.unified.services with LMTP
id cM6FBHgEFGrtWCwAs1GO1A:T773
(envelope-from <bounce-4137686-7-21008-xxxxxx=sunrise.ch@4137686.myactivecampaign.com>)
for <[email protected]>; Mon, 25 May 2026 12:36:01 +0200
Authentication-Results: edge.unified.services;
spf=pass (217.8.118.41;4137686.myactivecampaign.com);
dkim=pass header.d=myactivecampaign.com;
dkim=pass header.d=acems3.com;
dmarc=pass header.from=4137686.myactivecampaign.com (p=reject sp=reject dis=pass)
X-Env-Mailfrom: bounce-4137686-7-21008-xxxxxx=sunrise.ch@4137686.myactivecampaign.com
X-Env-Rcptto: [email protected]
X-SourceIP: 217.8.118.41
From: "SBB-Secure"
<[email protected]>
Subject: Wichtiger Hinweis: Ihr Konto =?UTF-8?Q?ben=C3=B6tigt=20eine=20kurze=20Akt?=
=?UTF-8?Q?ualisierung?=
Date: Mon, 25 May 2026 05:33:40 -0500
show less
Fake Swiss Pass mail
envelope-from <azx1nt9z4qmm20agfggjwva==_1142318191065_b0dvbk6hefgxjajccjiaag= ...
show moreFake Swiss Pass mail
envelope-from <azx1nt9z4qmm20agfggjwva==_1142318191065_b0dvbk6hefgxjajccjiaag==@in.constantcontact.com>)
for <[email protected]>; Wed, 13 May 2026 09:57:58 +0200
Authentication-Results: edge.unified.services;
spf=pass (208.75.123.168;in.constantcontact.com);
dkim=pass header.d=shared1.ccsend.com;
Received: from ccm168.constantcontact.com ([208.75.123.168])
Date: Wed, 13 May 2026 03:57:56 -0400 (EDT)
From: Ihr Kunde <[email protected]>
Reply-To: [email protected]
Subject: Betreff: Mitteilung zum Wechsel der Zahlungsmethode
show less
fake French Health Insur. mail
Received-SPF: Pass (protection.outlook.com: domain of em2476.theedg ...
show morefake French Health Insur. mail
Received-SPF: Pass (protection.outlook.com: domain of em2476.theedgesystems.co.uk designates 159.183.224.104 as permitted sender) receiver=protection.outlook.com; client-ip=159.183.224.104; helo=s.wfbtzhsv.outbound-mail.sendgrid.net; pr=C Received: from s.wfbtzhsv.outbound-mail.sendgrid.net (159.183.224.104) by CO1PEPF000066E6.mail.protection.outlook.com (10.167.249.4) with Microsoft Date: Tue, 12 May 2026 01:50:42 +0000 (UTC) From: GestionSante <[email protected]> Subject: Suite au traitement de votre dossier, un remboursement vous est du
show less
PhishingEmail SpamSpoofing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.