A phishing email was sent to an address under the rock.ma domain, attempting to impersonate our orga ...
show moreA phishing email was sent to an address under the rock.ma domain, attempting to impersonate our organization. The email claims an account action is required and provides fraudulent content. It passed SPF and DKIM verification for a domain unrelated to us (safesopkoin.com) and was sent from the IP 185.239.48.238.
Technical Details:
Return Path: [email protected]
Sender Domain: safesopkoin.com
DKIM Signature: Passed for safesopkoin.com.
SPF: Passed for IP 185.239.48.238.
ARC-Seal Header: Impersonation detected through mail relays.
Message Subject: Action required: [email protected] account is full.
show less
This IP address sent a fraudulent email impersonating my domain (rock.ma) under the false pretext of ...
show moreThis IP address sent a fraudulent email impersonating my domain (rock.ma) under the false pretext of "unusual login attempts." The email contains malicious links designed to trick recipients into revealing personal credentials. The email header confirms the origin from duprexofffshore.com while spoofing my domain.
show less
Repeated unauthorized attempts to send emails with headers suggesting they were from rock.ma. SPF re ...
show moreRepeated unauthorized attempts to send emails with headers suggesting they were from rock.ma. SPF records and header metadata reveal forgery.
show less
Email was flagged for spam with fraudulent intent, including misleading subject lines like "Delivery ...
show moreEmail was flagged for spam with fraudulent intent, including misleading subject lines like "Delivery Failure." SPF authentication failed, indicating unauthorized use of the sender domain.
show less
Email sent from an IP unauthorized for the rock.ma domain. The content imitates official communicati ...
show moreEmail sent from an IP unauthorized for the rock.ma domain. The content imitates official communication to manipulate the recipient into taking inappropriate actions. This is confirmed by SPF failures and header analysis.
show less
Spoofing attempt detected with forged sender details claiming to originate from rock.ma. The email m ...
show moreSpoofing attempt detected with forged sender details claiming to originate from rock.ma. The email mimics administrative notifications to deceive recipients. Headers confirm the IP is unauthorized to send emails on behalf of the domain.
show less
This IP was used to send a phishing email impersonating our domain (rock.ma). The email attempted to ...
show moreThis IP was used to send a phishing email impersonating our domain (rock.ma). The email attempted to deceive the recipient with a fake notification about failed incoming messages and included a malicious link directing to https://mikecaptures.com. The message is flagged as fraudulent.
**Key Details from Email Header**:
- From: Account Server <[email protected]>
- Source IP: 178.215.236.215
- SPF: Fail (domain of rock.ma does not designate 178.215.236.215 as permitted sender)
- DKIM: Fail
- DMARC: Fail
- Subject: Incoming Message Failed Fix Here
- Received Header: Received: from [178.215.236.215] (helo=rock.ma) by spamfilter2.loading.es.
This email did not originate from our authorized servers. It violates our domain’s security policies and is confirmed to be phishing. Please block or investigate this IP.
show less
This IP sent a phishing email impersonating my domain (rock.ma). The email contained a fake suspensi ...
show moreThis IP sent a phishing email impersonating my domain (rock.ma). The email contained a fake suspension notice targeting my users and attempting to redirect them to a malicious link.
Key Details:
- From: [email protected]
- Source IP: 155.94.210.244
- SPF Result: Fail (not authorized in the SPF record for rock.ma)
- DKIM Result: Fail (no valid DKIM signature detected)
- Subject: RE: SUSPENSION NOTICE FOR [email protected]
Received Header:
Received: from unknown (HELO unknown) (155.94.210.244) by [intermediate mail server];
This phishing attempt directly violates domain authentication policies and poses a threat to recipients. The message was flagged as spam and identified as a spoofing attempt. Please take action to block or investigate this IP.
show less
Phishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.