classic spam/scam
"If yes then send the executive summary and the financial projections to my ...
show moreclassic spam/scam
"If yes then send the executive summary and the financial projections to my Boss Aloke Lohia, CEO of Indorama Ventures PCL through via email "
Return-Path: <[email protected]>
dkim=pass (2048-bit key) header.d=bellafique.com;
domainkeys=pass (2048-bit key) [email protected]
header.d=bellafique.com
Subject: Project Funding
show less
Received: from skot-sift.com (skot-sift.com [5.255.121.27])
DKIM-Signature: v=1; a=rsa-sha256; q=dn ...
show moreReceived: from skot-sift.com (skot-sift.com [5.255.121.27])
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=skot-sift.com; s=mail; h=Date:Message-Id:Reply-To:To:From:Subject:
Subject: Your Premium Access is Ending Soon
From: Spotify <[email protected]>
<img src="https://i.imgur.com/4wvo6Am.png" alt="Spotify Logo" class="spotify-logo">
<h2>Your Premium Access is Ending Soon</h2>
<p>We're reminding you that your Premium subscription concludes on 2025-09-21.</p>
<p>you'll soon experience ads, lose downloaded playlists, and face playback restrictions.</p>
<p>Continue enjoying Spotify without limitations by renewing your membership now.</p>
<a href="https://tunehave.space/TuneHave/" class="spotify-button">STAY PREMIUM</a>
show less
part of a relay chain apparently for spamming.
Received: from [146.70.144.59] (helo=[10.149.241.185 ...
show morepart of a relay chain apparently for spamming.
Received: from [146.70.144.59] (helo=[10.149.241.185])
by cp.skot-sift.com with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <[email protected]>)
show less
Xorek again
Received: from amitda.com (unknown [94.141.160.164])
reason="invalid (public key: not ...
show moreXorek again
Received: from amitda.com (unknown [94.141.160.164])
reason="invalid (public key: not available)" header.d=amitda.com
h=Content-Type:MIME-Version:From:Subject:To:Message-ID:Date;
[email protected];
From: =?UTF-8?B?TWNBZmVl4oSi?= <[email protected]>
Subject: Re: =?UTF-8?B?U2VjdXJpdHkgV2FybmluZzogVGhlIGRldmljZSBpcyBmdWxsIG9mIHZpcnVzZXMgIQ==?=
Re: Security Warning: The device is full of viruses !
Your McAfee subscription may end today
show less
Google sending spam? who knew.
Received: from 142.63.140.34.bc.googleusercontent.com (HELO [10.88.0 ...
show moreGoogle sending spam? who knew.
Received: from 142.63.140.34.bc.googleusercontent.com (HELO [10.88.0.8]) ([34.140.63.142]) by mx684.mel.oss-core.net with ESMTP; 05 Nov 2024 08:33:38 +1100
reason="invalid (public key: not available)" header.d=amitda.com
Received: from amitda.com (unknown [94.141.160.164])
Message-ID: <[email protected]>
LAST REMINDER: CONFIRMATION NEEDED
Your McAfee subscription may end today
After the expiration date, your devices will be vulnerable to hackers.
show less
Received: from nts.powercomponents-nl.com (unknown [31.192.236.38])
Reply-To: Abdullah Hamza Muhamm ...
show moreReceived: from nts.powercomponents-nl.com (unknown [31.192.236.38])
Reply-To: Abdullah Hamza Muhammad <[email protected]>
From: Abdullah Hamza Muhammad <[email protected]>
Subject: Business Cooperative Initiative
dkim=pass (2048-bit key) header.d=powercomponents-nl.com
show less
dkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=thriveloop.space; domainke ...
show moredkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=thriveloop.space; domainkeys=fail (2048-bit key)
reason="fail (message has been altered)"
[email protected]
header.d=thriveloop.space
Received: from quebec.thriveloop.space (unknown [176.65.150.98])
From: "Do Not Drink Coffee" <[email protected]>
Reply-To: "Do Not Drink Coffee" <[email protected]>
Subject: Are You Eating This Everyday Food That Affects Your Nerves?
show less
Received: from send-newserv.online (send-newserv.online [5.255.123.83])
Subject: Your Premium Acc ...
show moreReceived: from send-newserv.online (send-newserv.online [5.255.123.83])
Subject: Your Premium Access is Ending Soon
From: Spotify <[email protected]>
<p>We're reminding you that your Premium subscription concludes on 2025-09-11.</p>
<p>you'll soon experience ads, lose downloaded playlists, and face playback restrictions.</p>
<p>Continue enjoying Spotify without limitations by renewing your membership now.</p>
<a href="https://beatifyline.com/BeatiFyline/" class="spotify-button">STAY PREMIUM</
show less
alt=3D"Discover Exclusive Luxury Watches from $250"=20
src=3D"https:///////////////g.ww ...
show morealt=3D"Discover Exclusive Luxury Watches from $250"=20
src=3D"https:///////////////g.wwwmountainsinsea.ru/15.jpg"=
show less
dkim=pass (2048-bit key) header.d=sparkyouth.site;
domainkeys=pass (2048-bit key) header.from=sup ...
show more dkim=pass (2048-bit key) header.d=sparkyouth.site;
domainkeys=pass (2048-bit key) [email protected]
header.d=sparkyouth.site
From: "Hunt & Fish" <[email protected]>
Reply-To: "Hunt & Fish" <[email protected]>
Subject: USA Today Hunt & Fish
X-Spam-Status: No, score=5.267 tagged_above=2 required=6.2
would have been spam if the dkim wasn't valid...
show less
dkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=folistrength.space; domain ...
show moredkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=folistrength.space; domainkeys=fail (2048-bit key)
reason="fail (message has been altered)"
[email protected]
header.d=folistrength.space
chula.folistrength.space (unknown [103.29.182.92])
From: "Facial serums" <[email protected]>
Reply-To: "Serum for wrinkles" <[email protected]>
Subject: Important Information About Sunscreen Ingredients to Consider
show less
Xorek again, scamming this time more brazenly
reason="invalid (public key: not available)" heade ...
show moreXorek again, scamming this time more brazenly
reason="invalid (public key: not available)" header.d=e.storage.com;
domainkeys=neutral reason="invalid (public key: not available)"
[email protected] header.d=e.storage.com
Received: from ejoil.com (unknown [85.142.88.239])
Received: from 142.63.140.34.bc.googleusercontent.com (HELO [10.88.0.8]) ([127.1.1.0]) by mx684.mel.oss-core.net with ESMTP; Wed, 13 Aug 2025 13:20:55 +0000
Reply-To: <[email protected]>
Sender: <[email protected]>
From: Your Cloud Storage <[email protected]>
Subject: Re: Urgent: Your cloud storage reached 100%
links to http://op8012.pwm.hu/4zvoVq44224LHpo697mpruqadcka6064MXZMJZRBMGXLJYQ163410WWHA10082F9
show less
Nuxt hosting spammer campaign Admiral.no6064 which has been jumping around for over a month between ...
show moreNuxt hosting spammer campaign Admiral.no6064 which has been jumping around for over a month between various servers.
reason="invalid (public key: not available)" header.d=ideamancy.com;
domainkeys=neutral reason="invalid (public key: not available)"
[email protected] header.d=ideamancy.com
Received: from ideamancy.com (unknown [212.113.109.230])
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=ideamancy.com;
h=MIME-Version:List-ID:From:To:Subject:Date:Message-ID:Content-Type:Content-Transfer-Encoding; [email protected];
bh=WcbMwJP+ifRhJn2CLeUOm6Et9Uw=;
From: "Admiral Team" <[email protected]>
Subject: FWD: FREE Car Emergency Kit #450008
show less
dkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=myaihelp.site; domainkeys= ...
show moredkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=myaihelp.site; domainkeys=fail (2048-bit key)
reason="fail (message has been altered)"
[email protected]
header.d=myaihelp.site
Received: from grid.myaihelp.site (unknown [45.142.192.5])
From: "Pocket Hose Copper Head Team" <[email protected]>
Reply-To: "Pocket Hose Copper Head Team" <[email protected]>
Subject: This Hose Outsold Every Other Hose in America
show less
Spam email pfcloud.io
dkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=fre ...
show moreSpam email pfcloud.io
dkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=freemiracle.site; domainkeys=fail (2048-bit key)
reason="fail (message has been altered)"
[email protected] header.d=freemiracle.sitedkim=fail (2048-bit key) reason="fail (body has been altered)"
header.d=freemiracle.site; domainkeys=fail (2048-bit key)
reason="fail (message has been altered)"
[email protected] header.d=freemiracle.site
Received: from yorker.freemiracle.site (unknown [176.65.149.133])
ping freemiracle.site
PING freemiracle.site (107.174.123.108): 56 data bytes
64 bytes from 107.174.123.108: icmp_seq=0 ttl=51 time=142.366 ms
From: "African Shrub" <[email protected]>
Reply-To: "Weird Shrub" <[email protected]>
Subject: The African Shrub that Awakens Your Deepest Desire...
show less
mail relay
Received: from eujpi (113.56.201.206) by server1.dhl-cargo.cn id hfqq2c0e97cs for xxxx
...
show moremail relay
Received: from eujpi (113.56.201.206) by server1.dhl-cargo.cn id hfqq2c0e97cs for xxxx
Reply-To: <[email protected]>
Date: Tue, 22 Jul 2025 04:52:28 +0800
From: "DHL-DU" <[email protected]>
show less
looks to be relayed off of some other server too
Received: from server1.dhl-cargo.cn (unknown [117. ...
show morelooks to be relayed off of some other server too
Received: from server1.dhl-cargo.cn (unknown [117.88.100.175])
Received: from eujpi (113.56.201.206) by server1.dhl-cargo.cn id hfqq2c0e97cs for xxxx
Reply-To: <[email protected]>
Date: Tue, 22 Jul 2025 04:52:28 +0800
From: "DHL-DU" <[email protected]>
Subject: =?utf-8?B?REhM5LiA57qn5Luj55CG77yMMeaKmOW4guWcuuacgOS9jiDlhajnkIPlpJrlm701?=
=?utf-8?B?5YWs5pakIDk55YWDIOi2hee6p+i0puaIt+WPr+S7peaOpeWkmuenjeS6p+WTgQ==?=
show less
interiakastliveruesbrokers.com phishing for IBKR customer accounts
<a href=3D"https://interiakast ...
show moreinteriakastliveruesbrokers.com phishing for IBKR customer accounts
<a href=3D"https://interiakastliveruesbrokers.com?token=3Dld3Bo=
4iBdAIFTxrutocA">
show less
more xorek.cloud spam - this one phishing for interactivebrokers
dkim=pass (2048-bit key) heade ...
show moremore xorek.cloud spam - this one phishing for interactivebrokers
dkim=pass (2048-bit key) header.d=wrffj.com
Received: from mail.wrffj.com (unknown [185.103.101.32])
From: InteractiveBrokers <[email protected]>
Subject: Your Account Needs Immediate Attention
<a href=3D"https://interiakastliveruesbrokers.com?token=3Dld3Bo=
4iBdAIFTxrutocA">
show less
PhishingSpoofing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.