Invoice scam, PDF attachment maybe possible malicious payload. Looks like sent from a hacked student ...
show moreInvoice scam, PDF attachment maybe possible malicious payload. Looks like sent from a hacked student/staff mailbox at rotterdam.edu.gt.
show less
Ye olde executive impersonation attempt to steal personal info.
"Hi <REDACTED>, Just wanted to chec ...
show moreYe olde executive impersonation attempt to steal personal info.
"Hi <REDACTED>, Just wanted to check what the best mobile line is to text you on? I'll be reaching out from my other number in a bit and want to make sure have your most up-to-date contact info. Cheers, ๐ฒ๐๐๐๐"
show less
Wire fraud attempt. Reply-to addresses hosted at titan.mail.
Received: from [104.152.187.22] (port= ...
show moreWire fraud attempt. Reply-to addresses hosted at titan.mail.
Received: from [104.152.187.22] (port=58057)
by dedi-15798077.engpac.com.br with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.5)
(envelope-from <[email protected]>)
id 1x1Mjh-0000000Gynr-15TK
for accountspayable@[REDACTED];
Tue, 01 Sep 2026 08:33:05 -0300
MIME-Version: 1.0
To: accountspayable@[REDACTED]
Reply-To: Adrian Connolly <[email protected]>, Logan <[email protected]>
Subject: =?utf-8?q?Strategic_Advisory_Services_=E2=80=93_August_2026_=E2=80=93_Adrian_Connolly?=
Date: Tue, 01 Sep 2026 03:33:00 -0800
X-Mailer: Microsoft Outlook 16.0
X-Priority: 3
From: Adrian Connolly <[email protected]>
Message-ID: <[email protected]>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
Message body: ๏ปฟ"Hello, I hope youโre doing well today. I need your assistance with processing a transaction ะขโาปโะฐโnโkโs."
show less
Suspected 419-style investment-themed solicitation scam campaigns. While individual domains and tena ...
show moreSuspected 419-style investment-themed solicitation scam campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation scam campaigns. While individual domains and tena ...
show moreSuspected 419-style investment-themed solicitation scam campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Suspected 419-style investment-themed solicitation campaigns. While individual domains and tenant id ...
show moreSuspected 419-style investment-themed solicitation campaigns. While individual domains and tenant identifiers change frequently, common characteristics were observed across messaging themes, Exchange Online infrastructure, domain naming conventions, registrar selections, and Entra organization identifiers. Emails handed off from Microsoft data centers in Central India and South India. Entra org identifiers involved are Mailin-Ai, MA-FT and MA-SS. Findings support the existence of a coordinated and repeatable operational pattern, though they do not independently establish the identity or intent of the operators.
show less
Email SpamPhishing
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.