Fake investor mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.unif ...
show moreFake investor mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.unified.services with LMTP
id x8QpLFFXa2iFIAQAs1GO1A:T2207
(envelope-from <[email protected]>)
for <[email protected]>; Mon, 07 Jul 2025 17:06:12 +0200
Received: from mout.gmx.net ([212.227.17.21])
(Client did not present a certificate)
by mx1-prd-nl1-sun.edge.unified.services with ESMTPS
id YnQ4uP7J9ytQyYnQ4uSNjG; Mon, 07 Jul 2025 17:06:12 +0200
Received: from [192.168.100.11] ([160.177.240.69]) by mail.gmx.net (mrgmx104
[212.227.17.168]) with ESMTPSA (Nemesis) id 1MSc1B-1u5pT01kFN-00LO7G for
<[email protected]>; Mon, 07 Jul 2025 17:06:12 +0200
From: "Benjamin_Graham-The_Intelligent_Investor" <[email protected]>
To: <[email protected]>
Subject: =?utf-8?Q?=F0=9F=93=98_=22Master_the_Market_with_Lesso?=
=?utf-8?Q?ns_from_The_Intelligent_Investor?=
=?utf-8?Q?=22?=
Date: Mon, 7 Jul 2025 17:06:14 +0200
Message-ID: <LLT9ANGAMQU4.XGWADQNIEFR2@DESKTOP-BB0DM1M>
show less
Fake investor mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.un ...
show moreFake investor mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir5-prd-nl1-sun.nl1.unified.services with LMTP
id x8QpLFFXa2iFIAQAs1GO1A:T2207
(envelope-from <[email protected]>)
for <[email protected]>; Mon, 07 Jul 2025 17:06:12 +0200
Received: from mout.gmx.net ([212.227.17.21])
(Client did not present a certificate)
by mx1-prd-nl1-sun.edge.unified.services with ESMTPS
id YnQ4uP7J9ytQyYnQ4uSNjG; Mon, 07 Jul 2025 17:06:12 +0200
Received: from [192.168.100.11] ([160.177.240.69]) by mail.gmx.net (mrgmx104
[212.227.17.168]) with ESMTPSA (Nemesis) id 1MSc1B-1u5pT01kFN-00LO7G for
<[email protected]>; Mon, 07 Jul 2025 17:06:12 +0200
From: "Benjamin_Graham-The_Intelligent_Investor" <[email protected]>
To: <[email protected]>
Subject: =?utf-8?Q?=F0=9F=93=98_=22Master_the_Market_with_Lesso?=
=?utf-8?Q?ns_from_The_Intelligent_Investor?=
=?utf-8?Q?=22?=
Date: Mon, 7 Jul 2025 17:06:14 +0200
Message-ID: <LLT9ANGAMQU4.XGWADQNIEFR2@DESKTOP-BB0DM1M>
show less
FAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: ...
show moreFAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from dcdir6-prd-nl1-sun.nl1.unified.services ([100.105.128.12])
by dcbe10-prd-nl1-sun.nl1.unified.services with LMTP
id mJGFHPm8ZGizdzQAcZsGTA:T2108:P1
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 02 Jul 2025 11:47:01 +0200
Authentication-Results: edge.unified.services;
spf=pass (80.237.130.10;cremer-rlp.de);
dkim=pass header.d=cremer-rlp.de;
dmarc=none header.from=cremer-rlp.de (dis=no_record)
X-Env-Mailfrom: [email protected]
Received: from wp488.webpack.hosteurope.de ([80.237.130.10])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
Received: from 27.172.204.35.bc.googleusercontent.com ([35.204.172.27] helo=cs-454325470567-default); authenticated
by wp488.webpack.hosteurope.de running ExIM with esmtpsa
From: Team <[email protected]>
Subject: Nr.:1235396
show less
FAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: ...
show moreFAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from dcdir6-prd-nl1-sun.nl1.unified.services ([100.105.128.12])
by dcbe10-prd-nl1-sun.nl1.unified.services with LMTP
id mJGFHPm8ZGizdzQAcZsGTA:T2108:P1
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 02 Jul 2025 11:47:01 +0200
Authentication-Results: edge.unified.services;
spf=pass (80.237.130.10;cremer-rlp.de);
dkim=pass header.d=cremer-rlp.de;
dmarc=none header.from=cremer-rlp.de (dis=no_record)
X-Env-Mailfrom: [email protected]
Received: from wp488.webpack.hosteurope.de ([80.237.130.10])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
Received: from 27.172.204.35.bc.googleusercontent.com ([35.204.172.27] helo=cs-454325470567-default); authenticated
by wp488.webpack.hosteurope.de running ExIM with esmtpsa
From: Team <[email protected]>
Subject: Nr.:1235396
show less
FAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: ...
show moreFAKE REFUNDING MAIL
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from dcdir6-prd-nl1-sun.nl1.unified.services ([100.105.128.12])
by dcbe10-prd-nl1-sun.nl1.unified.services with LMTP
id mJGFHPm8ZGizdzQAcZsGTA:T2108:P1
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 02 Jul 2025 11:47:01 +0200
Authentication-Results: edge.unified.services;
spf=pass (80.237.130.10;cremer-rlp.de);
dkim=pass header.d=cremer-rlp.de;
dmarc=none header.from=cremer-rlp.de (dis=no_record)
X-Env-Mailfrom: [email protected]
Received: from wp488.webpack.hosteurope.de ([80.237.130.10])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
Received: from 27.172.204.35.bc.googleusercontent.com ([35.204.172.27] helo=cs-454325470567-default); authenticated
by wp488.webpack.hosteurope.de running ExIM with esmtpsa
From: Team <[email protected]>
Subject: Nr.:1235396
show less
Received: from SG1PEPF000082E1.apcprd02.prod.outlook.com
(2603:1096:4:140:cafe::c2) by SI2P153CA00 ...
show moreReceived: from SG1PEPF000082E1.apcprd02.prod.outlook.com
(2603:1096:4:140:cafe::c2) by SI2P153CA0004.outlook.office365.com
(2603:1096:4:140::23) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.8901.6 via Frontend Transport; Wed,
25 Jun 2025 00:18:26 +0000
Authentication-Results: spf=pass (sender IP is 216.127.62.109)
smtp.mailfrom=bounce.naiadsystems.com; dkim=pass (signature was verified)
header.d=jerkmatelive.com;dmarc=bestguesspass action=none
header.from=jerkmatelive.com;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of bounce.naiadsystems.com
designates 216.127.62.109 as permitted sender)
receiver=protection.outlook.com; client-ip=216.127.62.109;
helo=mx-smarthost03.naiad.maila.sea.fciis.net; pr=C
Received: from mx-smarthost03.naiad.maila.sea.fciis.net (216.127.62.109) by
SG1PEPF000082E1.mail.protection.outlook.com (10.167.240.4) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8
show less
fake protection renewal mail :
Return-Path: <[email protected]>
Delivered-To: xxxxxx@sunrise. ...
show morefake protection renewal mail :
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from dcdir2-prd-nl1-sun.nl1.unified.services ([100.105.128.42])
by dcbe10-prd-nl1-sun.nl1.unified.services with LMTP
id nT25EpKYOGjj6AIAC4lHOA:T10:P1
(envelope-from <[email protected]>)
for <[email protected]>; Thu, 29 May 2025 19:25:47 +0200
Received: from smtpclienthelo ([100.105.128.42])
by dcdir2-prd-nl1-sun.nl1.unified.services with LMTP
id nT25EpKYOGjj6AIAC4lHOA:T10
(envelope-from <[email protected]>)
for <[email protected]>; Thu, 29 May 2025 19:25:47 +0200
Authentication-Results: edge.unified.services;
spf=pass (15.235.174.26;generatisted.com);
dkim=none (nosigs);
dmarc=permerror header.from=generatisted.com (dis=record unparsable: required version tag missing from record)
X-Env-Mailfrom: [email protected]
X-SourceIP: 15.235.174.26
From: "Sicherheit Alarm" <[email protected]>
show less
mail with subject : cc but no text, wishes an answer (I did not give)
Return-Path: <[email protected] ...
show moremail with subject : cc but no text, wishes an answer (I did not give)
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received:
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 07 May 2025 15:59:33 +0200
Received: from smtpclienthelo ([100.105.128.43])
by dcdir6-prd-nl1-sun.nl1.unified.services with LMTP
id 3v2sGS8vG2h0ki8AcZsGTA:T847
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 07 May 2025 15:59:33 +0200
Authentication-Results: edge.unified.services;
spf=pass (173.212.208.125;0795fcw.com);
dkim=pass header.d=0795fcw.com;
dmarc=pass header.from=0795fcw.com (p=quarantine sp=quarantine dis=pass)
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 173.212.208.125
From: cc <[email protected]>
Message-ID: <[email protected]>
Subject: cc
show less
Fake Galaxus mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir4-prd-nl1-sun.nl1.unifi ...
show moreFake Galaxus mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir4-prd-nl1-sun.nl1.unified.services with LMTP
id VT1THW5uC2gNXzoAQQcz9A:T260
(envelope-from <[email protected]>)
for <[email protected]>; Fri, 25 Apr 2025 15:01:05 +0200
Authentication-Results: edge.unified.services;
spf=pass (195.202.160.194;kabelplus.at);
dkim=none (nosigs);
dmarc=none header.from=kabelplus.at (dis=no_record)
X-Env-Mailfrom: [email protected]
X-SourceIP: 195.202.160.194
Received: from [192.168.3.191] (unknown [196.77.115.233])
From: Galaxus <[email protected]>
Subject: [News] Letzte Chance: HP Laptop Freischalten
Date: Fri, 25 Apr 2025 14:52:47 +0200
show less
Fake Galaxus mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir4-prd-nl1-sun.nl1.unif ...
show moreFake Galaxus mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir4-prd-nl1-sun.nl1.unified.services with LMTP
id VT1THW5uC2gNXzoAQQcz9A:T260
(envelope-from <[email protected]>)
for <[email protected]>; Fri, 25 Apr 2025 15:01:05 +0200
Authentication-Results: edge.unified.services;
spf=pass (195.202.160.194;kabelplus.at);
dkim=none (nosigs);
dmarc=none header.from=kabelplus.at (dis=no_record)
X-Env-Mailfrom: [email protected]
X-SourceIP: 195.202.160.194
Received: from [192.168.3.191] (unknown [196.77.115.233])
From: Galaxus <[email protected]>
Subject: [News] Letzte Chance: HP Laptop Freischalten
Date: Fri, 25 Apr 2025 14:52:47 +0200
show less
fake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified.s ...
show morefake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified.services with LMTP
id aEVwLQ018mfU9ycAUw4nEQ:T1536
(envelope-from <[email protected]>)
Authentication-Results: edge.unified.services;
spf=pass (82.165.159.14;gmx.ch);
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 82.165.159.14
Received: from [192.168.100.195] ([105.158.189.122]) by mail.gmx.net (mrgmx005
[212.227.17.190]) with ESMTPSA (Nemesis) id 1MQMuR-1tfogD3zlJ-00YbPW for
<[email protected]>; Sun, 06 Apr 2025 17:52:57 +0200
X-Spam-Flag: YES
From: Obi Partner <[email protected]>
Date: Sun, 06 Apr 2025 16:52:56 +0100
Subject: =?utf-8?q?
show less
fake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified.s ...
show morefake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified.services with LMTP
id aEVwLQ018mfU9ycAUw4nEQ:T1536
(envelope-from <[email protected]>)
Authentication-Results: edge.unified.services;
spf=pass (82.165.159.14;gmx.ch);
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 82.165.159.14
Received: from [192.168.100.195] ([105.158.189.122]) by mail.gmx.net (mrgmx005
[212.227.17.190]) with ESMTPSA (Nemesis) id 1MQMuR-1tfogD3zlJ-00YbPW for
<[email protected]>; Sun, 06 Apr 2025 17:52:57 +0200
X-Spam-Flag: YES
From: Obi Partner <[email protected]>
Date: Sun, 06 Apr 2025 16:52:56 +0100
Subject: =?utf-8?q?
show less
fake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified. ...
show morefake OBI mail
Received: from smtpclienthelo ([100.105.128.42])
by dcdir3-prd-nl1-sun.nl1.unified.services with LMTP
id aEVwLQ018mfU9ycAUw4nEQ:T1536
(envelope-from <[email protected]>)
Authentication-Results: edge.unified.services;
spf=pass (82.165.159.14;gmx.ch);
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 82.165.159.14
Received: from [192.168.100.195] ([105.158.189.122]) by mail.gmx.net (mrgmx005
[212.227.17.190]) with ESMTPSA (Nemesis) id 1MQMuR-1tfogD3zlJ-00YbPW for
<[email protected]>; Sun, 06 Apr 2025 17:52:57 +0200
X-Spam-Flag: YES
From: Obi Partner <[email protected]>
Date: Sun, 06 Apr 2025 16:52:56 +0100
Subject: =?utf-8?q?
show less
Threat of extorsion by asking payment of 1700 USD on a Litecoin wallet
Received: from DU6PEPF0000A ...
show moreThreat of extorsion by asking payment of 1700 USD on a Litecoin wallet
Received: from DU6PEPF0000A7E4.eurprd02.prod.outlook.com
(2603:10a6:10:2b1:cafe::69) by DU2PR04CA0235.outlook.office365.com
(2603:10a6:10:2b1::30) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.42 via Frontend Transport; Mon,
24 Mar 2025 10:46:46 +0000
Authentication-Results: spf=softfail (sender IP is 154.196.86.102)
smtp.mailfrom=outlook.com; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=outlook.com;compauth=fail
reason=001
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
outlook.com discourages use of 154.196.86.102 as permitted sender)
Received: from productsafetylabss.com (154.196.86.102) by
DU6PEPF0000A7E4.mail.protection.outlook.com (10.167.8.43) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.8534.20 via Frontend Transport;
Subject: I saw everything.
show less
fake Swica insurance refund mail
Received: from o2.sg.calendly.com ([167.89.22.99])
(using TLSv1. ...
show morefake Swica insurance refund mail
Received: from o2.sg.calendly.com ([167.89.22.99])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
by mx2-prd-nl1-sun.edge.unified.services with ESMTPS
id xxAItuOUpdhv6xxAJtAtfe; Fri, 28 Mar 2025 01:01:40 +0100
Reply-To: <[email protected]>
From: "mySWICA" <[email protected]>
Subject: =?iso-8859-1?Q?=3F=3FOrder_SW3847571966_Die_R=FCckerstattung_wurde_bearbe?=
=?iso-8859-1?Q?itet_und_f=FCr_g=FCltig_erkl=E4rt.?=
Date: Fri, 28 Mar 2025 01:01:38 +0100
Message-ID: <IYt6m72zSdi6A2sxRvby2A@geopod-ismtpd-16>
Authentication-Results: edge.unified.services;
spf=pass (167.89.22.99;em1618.calendly.com);
dkim=pass header.d=calendly.com;
X-SourceIP: 167.89.22.99
show less
FRAUD ! false fine payment appeal in France
Received: from smtpclienthelo ([100.105.128.42])
by d ...
show moreFRAUD ! false fine payment appeal in France
Received: from smtpclienthelo ([100.105.128.42])
by dcdir4-prd-nl1-sun.nl1.unified.services with LMTP
id CrMvMhSU4Wd96zMAQQcz9A:T1095
(envelope-from <[email protected]>)
for <[email protected]>; Tue, 25 Mar 2025 01:50:50 +0100
Authentication-Results: edge.unified.services;
spf=pass (209.85.128.97;canalcapital.gov.co);
dkim=pass header.d=bogota-gov-co.20230601.gappssmtp.com;
dmarc=none header.from=canalcapital.gov.co (dis=no_record)
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 209.85.128.97
Return-Path: <[email protected]>
Received: from EC2AMAZ-2K0NHO0 ([5.62.20.53])
by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-43d43f56211sm11036165e9.26.2025.03.24.17.50.49
X-Relaying-Domain: canalcapital.gov.co
Date: Tue, 25 Mar 2025 00:50:49 +0000 (UTC)
From: =?UTF-8?Q?Signalement_d=E2=80=99infraction?=
<[email protected]>
show less
relay for fake Ikea mail
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [1 ...
show morerelay for fake Ikea mail
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [192.168.100.26] ([105.159.19.108]) by mail.gmx.net (mrgmx104
[212.227.17.168]) with ESMTPSA (Nemesis) id 1N5GE1-1syFb23vGv-00tEBo for
<[email protected]>; Sun, 23 Mar 2025 20:52:18 +0100
From: IKEA-Kundensupport <[email protected]>
Date: Sun, 23 Mar 2025 19:52:11 +0000
show less
fake Ikea mail
Received: from smtpclienthelo ([100.105.128.45])
by dcdir6-prd-nl1-sun.nl1.unified ...
show morefake Ikea mail
Received: from smtpclienthelo ([100.105.128.45])
by dcdir6-prd-nl1-sun.nl1.unified.services with LMTP
id 5Y+kLq4q4GerUS8AcZsGTA:T769
(envelope-from <[email protected]>)
for <[email protected]>; Sun, 23 Mar 2025 20:52:18 +0100
Authentication-Results: edge.unified.services;
spf=pass (212.227.17.21;gmx.net);
dkim=pass header.d=gmx.net;
dmarc=pass header.from=gmx.net (p=quarantine sp=quarantine dis=pass)
X-Env-Mailfrom: [email protected]
X-Env-Rcptto: [email protected]
X-SourceIP: 212.227.17.21
Received: from mout.gmx.net ([212.227.17.21])
Received: from [192.168.100.26] ([105.159.19.108]) by mail.gmx.net (mrgmx104
[212.227.17.168]) with ESMTPSA (Nemesis) id 1N5GE1-1syFb23vGv-00tEBo for
<[email protected]>; Sun, 23 Mar 2025 20:52:18 +0100
From: IKEA-Kundensupport <[email protected]>
Date: Sun, 23 Mar 2025 19:52:11 +0000
show less
Authentication-Results: edge.unified.services;
spf=pass (101.110.9.80;i.softbank.jp);
dkim=pass ...
show moreAuthentication-Results: edge.unified.services;
spf=pass (101.110.9.80;i.softbank.jp);
dkim=pass header.d=i.softbank.jp;
dmarc=pass header.from=i.softbank.jp (p=quarantine sp=quarantine dis=pass)
X-Env-Mailfrom: [email protected]
Received: from icmsa400401.i.softbank.jp ([101.110.9.80])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
by mx4-prd-nl1-sun.edge.unified.services with ESMTPS
id uMhltIfHv4r58uMhntIyFY; Tue, 18 Mar 2025 03:29:26 +0100
Received: from smtp.softbank.jp by icmsa300401.i.softbank.jp with ESMTP
id <20250318022847232.WPLH.85063.icmsa300401.i.softbank.jp@icmsa300401.mailsv.softbank.jp>
From: "aurelevesy" <[email protected]>
Subject: =?UTF-8?Q?aurelevesy__was_Sie_denken?=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=i.softbank.jp; s=isoftbank202401; t=1742264927;
show less