Casino spam. HELO amtb.aquilaholdings[.]co.uk (forged), SPF fail, From TheOfficialTrustedPartneratal ...
show moreCasino spam. HELO amtb.aquilaholdings[.]co.uk (forged), SPF fail, From TheOfficialTrustedPartneratall.<random>, Reply-To reply-<token>[@]in2.getdrip[.]com (template). Azure VM. Case JF-20261012-102.
show less
Casino spam (MagicWin). HELO f349.csipadova[.]it (forged), From TheOfficialTrustedPartneratall.<rand ...
show moreCasino spam (MagicWin). HELO f349.csipadova[.]it (forged), From TheOfficialTrustedPartneratall.<random>, Reply-To reply-<token>[@]in2.getdrip[.]com (template). Azure VM. Case JF-20261007-024.
show less
Casino spam ("Shakebet") from no-reply[@]mailboost[.]site, envelope novacart[.]store, HELO koepp[.]c ...
show moreCasino spam ("Shakebet") from no-reply[@]mailboost[.]site, envelope novacart[.]store, HELO koepp[.]click-zone[.]site, click domain pumasola[.]com (ei=16434). Previously reported to Microsoft (SIR24892093); still sending. Ref JF-20261024-523.
show less
Casino spam "SISTA CHANSEN" from no-reply[@]mailboost[.]site, 4 messages 22 Oct (JF-20261024-482 to ...
show moreCasino spam "SISTA CHANSEN" from no-reply[@]mailboost[.]site, 4 messages 22 Oct (JF-20261024-482 to -485). Already reported (SIR24952940); still sending. Link vertexgroupe[.]com (not opened). Sent from 20.101.83.232 2026-10-22 17:23:05 UTC. Ref JF-20261024-482.
show less
Casino/fake-balance spam from no-reply[@]mailboost[.]site, 4 messages 22–23 Oct (JF-20261024-476, -5 ...
show moreCasino/fake-balance spam from no-reply[@]mailboost[.]site, 4 messages 22–23 Oct (JF-20261024-476, -502, -503, -504). Already reported (SIR24948875); still sending. Sent from 20.169.43.18 2026-10-22 14:56:28 UTC. Ref JF-20261024-476.
show less
Health-scam spam (fake "CBS News / Dr. Oz" blood-pressure cure), From info[@]-----mail.Hm3Q6DAl7nrjZ ...
show moreHealth-scam spam (fake "CBS News / Dr. Oz" blood-pressure cure), From info[@]-----mail.Hm3Q6DAl7nrjZU[.]com. Links *.swiftperch[.]website (not opened), image on img.mailinblue[.]com (Brevo). Sent from 172.212.197.243 2026-10-23 16:12:49 UTC. Ref JF-20261024-500.
show less
Casino spam ("Spin Castle"), random From domain, Reply-To in2.getdrip[.]com, Message-ID @geopod-ismt ...
show moreCasino spam ("Spin Castle"), random From domain, Reply-To in2.getdrip[.]com, Message-ID @geopod-ismtpd-4-4. Link sendpulsepro[.]club (not opened). Sent from 4.198.112.100 2026-10-24 09:34:57 UTC. Ref JF-20261024-516.
show less
Prize-scam spam impersonating Netto (Danish) 22 Oct 05:28 UTC from Azure 20.12.212.199, HELO mxuw.Pr ...
show morePrize-scam spam impersonating Netto (Danish) 22 Oct 05:28 UTC from Azure 20.12.212.199, HELO mxuw.PropertyCrest.com (SPF fail), From [email protected] (NXDOMAIN), Reply-To in2.getdrip.com, Message-ID @geopod-ismtpd-4-4. Link brighntpath[.]website (not opened). Ref JF-20261022-452.
show less
Two more casino spam messages 21 Oct 14:29 and 14:49 UTC ("TheSlotz") from Azure 20.169.43.18, HELO ...
show moreTwo more casino spam messages 21 Oct 14:29 and 14:49 UTC ("TheSlotz") from Azure 20.169.43.18, HELO reynolds.social-marketing.ink, From [email protected] (DKIM d=mailboost.site), envelope [email protected], links trust-us.uk (not opened). Refs JF-20261021-418, -423.
show less
Four more casino spam messages 20 Oct 16:00–16:56 UTC ("Wino casino", "Spinzen Casino" fake payout) ...
show moreFour more casino spam messages 20 Oct 16:00–16:56 UTC ("Wino casino", "Spinzen Casino" fake payout) from Azure 20.169.43.18, HELO reynolds.social-marketing.ink, From [email protected] (DKIM d=mailboost.site), envelope [email protected], links trustus-eu.uk (not opened). Refs JF-20261020-325..329.
show less
Repeat casino spam ("Gambiva casino"/WinOlympia) from Azure 20.169.43.18, 35 min after previous repo ...
show moreRepeat casino spam ("Gambiva casino"/WinOlympia) from Azure 20.169.43.18, 35 min after previous report. HELO reynolds.social-marketing.ink, From [email protected] (DKIM d=mailboost.site), envelope [email protected]. Ref JF-20261020-323.
show less
Health-supplement and casino spam (2 messages, 14:31:58 and 18:08:09 UTC, refs JF-20261019-269 and - ...
show moreHealth-supplement and casino spam (2 messages, 14:31:58 and 18:08:09 UTC, refs JF-20261019-269 and -287) from Azure 20.101.83.232, HELO schoen.future-tech.fit, From [email protected] (DKIM d=mailboost.site), envelope [email protected]. Tracking links vertexgroupe.com (not opened). Same operator as earlier Azure IPs 51.124.218.216, 20.101.76.72, 20.169.43.18. Ref JF-20261019-269.
show less
Cloud-storage phishing lure ("Your Cloud ID has been locked...") from Azure 20.110.236.233, HELO 92k ...
show moreCloud-storage phishing lure ("Your Cloud ID has been locked...") from Azure 20.110.236.233, HELO 92k9.weoq5.a.dmarcdutydns.com, forged envelope (SPF fail), no DKIM. Message-ID <[email protected]> (forged). Link: random subdomain of bringyournewproduct.org (not opened). Ref JF-20261019-256.
show less
McAfee-impersonation phishing calendar invite to Hotmail 2026-10-17 20:51:25 UTC, HELO dnaa.serveblo ...
show moreMcAfee-impersonation phishing calendar invite to Hotmail 2026-10-17 20:51:25 UTC, HELO dnaa.serveblog[.]net (No-IP), link oppwer[.]shop. (JF-20261017-188)
show less
Email SpamPhishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.