GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 815-594-5256
Authentication-Resul ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 815-594-5256
Authentication-Results: spf=pass (sender IP is 209.85.222.171)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
From: [email protected]
X-Google-Original-From: PayPal,LLC
Subject: Your Transaction Z9C872KX1M has been delivered
Content-Type: multipart/mixed; boundary="boundary123"
Geek Squad
Cyber Protection Division
Date: 2026-04-24
ID: #73343275276
Hey Available For Download Thanks For Purchasing! Order Details And Below
Account Overview
Customer: X
Email: X
Reference ID: 3096-PR-9531
Service Plan: Advanced Cyber Protection
Package: Multi-Device Coverage
Amount: $467.5
If you did not authorize this activity, please contact Geek Squad support immediately for verification and account protection assistance.
Support Hotline
+1 (815) 594 5256
show less
SUPPORT INDIAN SCAMMERS AT 863-409-5470
Authentication-Results: spf=pass (sender IP is 209.85.215.1 ...
show moreSUPPORT INDIAN SCAMMERS AT 863-409-5470
Authentication-Results: spf=pass (sender IP is 209.85.215.173)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
From: X <[email protected]>
Subject: Your Membership Is Active Today
We are informing you that your Microsoft Office 365 subscription renewal has been completed successfully. Your account remains fully active.
A payment of $654.99 has been processed and should appear in your Microsoft account within the next 12 hours.
If you did not authorize this payment or need assistance, please contact us at (+1 863) 409-5470.
Billing Summary
• Customer ID: 365003
• Active Plan: Microsoft OneDrive
• Charged Amount: $654.99
Support Information
(+1 863) 409-5470
Sincerely,
Microsoft Office Billing Services
Account Manager: Rachel Evans
show less
SUPPORT INDIAN SCAMMERS AT 347-268-9369
Authentication-Results: spf=pass (sender IP is 209.85.218.4 ...
show moreSUPPORT INDIAN SCAMMERS AT 347-268-9369
Authentication-Results: spf=pass (sender IP is 209.85.218.46)
smtp.mailfrom=tumo.org; dkim=pass (signature was verified)
header.d=tumo.org;dmarc=pass action=none header.from=tumo.org;compauth=pass
reason=100
From: Volodya Arestakesyan <[email protected]>
Subject: Transaction Completed
To: undisclosed-recipients:;
Dear Customer,
We appreciate your continued trust in Geek Squad.
Your Geek Squad Protection Plan invoice has been generated and is currently pending billing.
Help Desk: +1 (347) 268-9369
Service: Geek Squad Protection Plan
Invoice Amount: $374.49
Billing Date: 04-22-2026
Invoice Number: GS-10JND524
Order Number: 45236987
Payment Method: Auto-Debit
If this billing is unfamiliar or you’d like to make changes to your service, please contact our support team at: +1 (347) 268-9369
show less
GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-360-6894
Authentication-Resul ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-360-6894
Authentication-Results: spf=pass (sender IP is 209.85.222.45)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
From: [email protected]
X-Google-Original-From: PayPal, Inc.
Subject: X, Order No. WS509143 is processed for you
Content-Type: multipart/mixed; boundary="boundary123"
Order ID
77476843573
Customer Support
(805)-360-6894
Service Information
Reference Code: 4089-CT-9440
Email: X
This message confirms that your recent payment has been processed through our secure system. The transaction was completed successfully on 2026-04-15.
Your account remains active, and all associated services are functioning normally. If you do not recognize this activity, please contact our support team as soon as possible.
Total Charged USD 474.45
For any questions or assistance, please contact us at (805)-360-6894
show less
GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 845-830-3070
Authentication-Result ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 845-830-3070
Authentication-Results: spf=pass (sender IP is 209.85.161.47)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Received: from 970283630269 named unknown by gmailapi.google.com with
HTTPREST; Thu, 9 Apr 2026 11:33:52 -0500
From: Valentin Hagenes <[email protected]>
Subject: Order confirmation YQ6GUGFNBHKT7X_1555K
Invoice Number: 656PM_2026_OUCB
PayPal Stripe User
$570.39 (USD) due 09-04-2026
YOU'VE SENT A PAYMENT OF $570.39 TO COFFEE MAKER
It may take a few moments for this transaction to appear in your statement.
Issues with this transaction?
Please call at +1.845.830-3070 within 12 hours if you have any questions concerning your order
Description Qty Unit price Amount
Coffee Maker (Q32-974676) 1 $570.39 $570.39
Don’t recognize this transaction? Contact PayPal +1.845.830-3070 For dispute/claim
show less
GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-694-3249 Received: from mail-yx ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-694-3249 Received: from mail-yx1-f45.google.com (74.125.224.45) by
SJ5PEPF000001D0.mail.protection.outlook.com (10.167.242.52) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9769.17
via Frontend Transport;
From: Autopay biIIing-dept <[email protected]>
Subject: Order Update: Renewal Scheduled for Your Subscription #NP020402213737
To: [email protected]
We are writing to confirm that we have received a request regarding your Ultimate Plus (2-Year) membership (PER ATTACHED FILE "auto-renewal of your Norton subscription").
Order Summary:
Reference ID: #NP0204022137
Plan: Ultimate Plus (Bi-annual)
Amount: $199.99
CUSTOMER ID: NP88Z/0056789
You can view your full receipt <snip> the document attached to this message.
If this request was not authorized by you, please reach out to our dedicated support line immediately at +1 (805) 694-3249.
show less
GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-694-3249
Received: from mail-o ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-694-3249
Received: from mail-oo1-f48.google.com (209.85.161.48) by
BL02EPF0002992C.mail.protection.outlook.com (10.167.249.57) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9769.17
via Frontend Transport; Wed, 1 Apr 2026 18:17:36 +0000
From: Autopay biIIing-dept <[email protected]>
Subject: Order Update: Renewal Scheduled for Your Subscription #NP020401162929
To: [email protected]
We have received a recent request associated with your subscription (PER ATTACHED FILE "auto-renewal of your Norton subscription") and are currently reviewing the information.
Transaction Details:
Reference: #NP020401162929
Service Type: Ultimate Plus (2-Year Subscription)
Total Amount: $199.99
the full invoice and applicable terms are provided in the attached file.
If you notice anything unusual or need assistance, please contact us at +1 805 694 3249.
show less
GOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 815-296-3524
Authentication-Resul ...
show moreGOOGLE AND NEUTRAL TANDEM/SINCH SPONSORED INDIAN SCAM. CALL THEM 815-296-3524
Authentication-Results: spf=pass (sender IP is 209.85.210.53)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
From: PayPal US <[email protected]>
X-Google-Original-From: PayPal US
Subject: Reminder: Payment Due for Invoice #490EF416
Content-Type: multipart/mixed; boundary="boundary123"
Sale Receipt No- #73564012515
Norton AntiVirus has shipped! Track your order here.
Cheers to The Past Years! Here's to The Next 1 Year...
Sale Details-
Customer- X
User Email- X
Relationship Id- 4159-AW-5003
Order- PayPal US
Item- Identity Theft Protection
Charges- $497.85
It's amazing you've now officially been with PayPal US for another 1 year!
In case you don't want to continue with us, call us at
+1-815 296 3524
before 2026-03-31 to avoid any recurring payment.
More Information Call Any Time - +1-815 296 3524
show less
GOOGLE AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-666-7144
Authentication-Results: spf=p ...
show moreGOOGLE AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 805-666-7144
Authentication-Results: spf=pass (sender IP is 209.85.222.170)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Message-ID: <[email protected]>
From: PayPal US <[email protected]>
X-Google-Original-From: PayPal US
Subject: X, Payment for order no. GHF8773-BV-3914FZ is approved
Dear Valued Customer,
We’ve detected unusual activity on your PayPal US account and want to ensure your account remains secure.
Transaction Details:
• Transaction ID: 20897-6937
• Amount: $426.15
Need Help?
Our dedicated support team is here to assist you:
📞 +1-805-666-7144 (Available 24/7)
📧 security@PayPal US.com
For your security, we recommend:
✓ Enabling two-factor authentication
✓ Monitoring your account regularly
Thank you for your prompt attention to this matter.
Sincerely,
The PayPal US Security Team
show less
Authentication-Results: spf=pass (sender IP is 209.85.128.45)
smtp.mailfrom=gmail.com; dkim=pass ( ...
show moreAuthentication-Results: spf=pass (sender IP is 209.85.128.45)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Message-ID: <[email protected]>
From: "J.D" <[email protected]>
Reply-To: "J.D" <[email protected]>
Subject: Attention!!!
Greetings,
This correspondence serves to notify you that I am communicating on behalf of James Williams, as your details are referenced in his records and you are mentioned in his previous trust documents. Should you have any inquiries or require further information, please do not hesitate to reach out to me.
Thank you for your attention to this matter.
Best regards,
Joseph Daniels
[[email protected]]
show less
GOOGLE AND MICROSOFT SPONSORED INDIAN SCAM. CALL THEM 865-249-2705
Authentication-Results: spf=pass ...
show moreGOOGLE AND MICROSOFT SPONSORED INDIAN SCAM. CALL THEM 865-249-2705
Authentication-Results: spf=pass (sender IP is 40.93.10.77)
smtp.mailfrom=groups.outlook.com; dkim=pass (signature was verified)
header.d=edu-swiebodzin-pl.20230601.gappssmtp.com;dmarc=permerror action=none
header.from=edu.swiebodzin.pl;
From: Natalia Aptacy <[email protected]>
Subject: Invoice update billing update
To: [email protected]
Toll-Free call 1 - (865) - 249 - 2705
Invoice Information
Transaction ID: NS-94720153
Payment Method: Online wallet
Order Status: Completed
Customer Information
Customer Name: Registered User
Email Address: Customer Email On File
Customer ID: NS-542139
Product Description Amount
Norton 360 Standard Security Protection (1 Year) $299.00
Standard Service Included
Tax $5.20
Total Amount $304.20
Important Notice:
If you did not authorize this transaction, please contact support immediately before processing is completed.
show less
GOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2135 Authentication-R ...
show more
GOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2135 Authentication-Results: spf=pass (sender IP is 40.93.12.9)
smtp.mailfrom=groups.outlook.com; dkim=pass (signature was verified)
header.d=susd12.org;dmarc=pass action=none
header.from=susd12.org;compauth=pass reason=100
From: Alvaro Chavez Chavez <[email protected]> Subject: Your invoice has been updated To: [email protected] Payment Method: Pay.Pal. Invoice No: INV-2026-M03 Date: 05 March 2026 Transaction ID: PAY2345PAL678 Apple Mac Studio M3 Ultra 1 $599.98 $599.98 Grand Total: $599.98 Configuration: Supercharged by M4 Max, with an up to 16-core CPU, an up to 40-core GPU and a 16-core Neural Engine. please contact customer support for assistance (970) 303- 2135
show less
GOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2135
Authentication-Resu ...
show moreGOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2135
Authentication-Results-Original: spf=pass (sender IP is 209.222.82.133)
smtp.mailfrom=susd12.org; dkim=pass (signature was verified)
header.d=susd12.org;dmarc=pass action=none
header.from=susd12.org;compauth=pass reason=100
From: Alvaro Chavez Chavez <[email protected]>
Subject: Your invoice has been updated
To: [email protected]
Payment Method: Pay.Pal.
Invoice No: INV-2026-M03
Date: 05 March 2026
Transaction ID: PAY2345PAL678
Apple Mac Studio
M3 Ultra 1 $599.98 $599.98
Grand Total: $599.98
Configuration:
Supercharged by M4 Max, with an up to 16-core CPU, an up to 40-core GPU and a 16-core Neural Engine.
please contact customer support for assistance (970) 303- 2135
show less
GOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2642
Authentication-Resu ...
show moreGOOGLE, MICROSOFT AND ONVOY/SINCH SPONSORED INDIAN SCAM. CALL THEM 970-303-2642
Authentication-Results: spf=pass (sender IP is 40.93.6.35)
smtp.mailfrom=groups.outlook.com;
Received: from mail-ej1-f48.google.com (209.85.218.48) by
DB5PEPF00014B8D.mail.protection.outlook.com (10.167.8.201) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9654.16
via Frontend Transport; Tue, 3 Mar 2026 13:15:23 +0000
From: BRYAN CENTENO <[email protected]>
Subject: In_voice confirmation notice
To: [email protected]
PayPal
INVOICE
Invoice No: INV-2026-M03
Transaction ID: PAY2345PAL678
Apple Mac Studio
M3 Ultra
1
$799.98
$799.98
Grand Total: $799.98
Configuration:
Supercharged by M4 Max (Note: FREE UPGRADE FROM M3 Ultra ABOVE. But indians are the self-proclaimed smarted people.)
If you have questions regarding this transaction, please contact customer support for assistance (970) 303- 2642
show less
MORE SCAMS FROM ICE'S FAVORITE PAYEE MICROSOFT
Authentication-Results: spf=none (sender IP is 20. ...
show moreMORE SCAMS FROM ICE'S FAVORITE PAYEE MICROSOFT
Authentication-Results: spf=none (sender IP is 20.246.4.36)
smtp.helo=nequeapnpm.ynxaooyuwzqzstqyhvuiai.shop; dkim=none (message not
signed) header.d=none;dmarc=none action=none
header.from=48._ecoenergi.online;
From: AmeriSave Cashout<noreply@48._ecoenergi.online>
Subject: Do you want to refinance your home? AmeriSave can help
Refinance Smarter With AmeriSave
Lower your monthly payment, shorten your loan term, or cash out your home’s equity. AmeriSave makes it simple to find the right refinance or cash-out option for your needs.
Start My Quote
AmeriSave Mortgage Corporation, NMLS ID #1168, (www.nmlsconsumeraccess.org);
To check the license status of your mortgage loan originator, visit http://4.215.207.6/X
show less
Authentication-Results: spf=pass (sender IP is 154.29.71.155)
smtp.mailfrom=longislandpeople.com; ...
show moreAuthentication-Results: spf=pass (sender IP is 154.29.71.155)
smtp.mailfrom=longislandpeople.com; dkim=timeout (key query timeout)
header.d=simplepnp.com;dkim=pass (signature was verified)
header.d=theletterg.org;dmarc=temperror action=none
header.from=simplepnp.com;
Subject: Two little drops kills even the worst pain ~qlsrn
From: "instant pain relief ~qlsrn-"<[email protected]>
Message-Id: <nVzsrSxh-DpyXAbnu-tyl9-49955-CVDKSlIiz2k7@VI1EUR4565ER.eop-eur04.prod.klo>
Sender: "instant pain relief ~qlsrn-"<[email protected]>
<a href="https://savanahstrever.com/X>𝟱𝟬𝟬% 𝗠𝗼𝗿𝗲 𝗘𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲 𝗧𝗵𝗮𝗻 𝗣𝗶𝗹𝗹𝘀 </a>
Hey,
New Harvard studies revealed just three “miracle drops” can…
✔ Heal even your worst joint pain…
✔ Switch off the pain signals inside your brain…
✔ Ease pain in as little as 54 seconds…
Plus, they are safe and can be used from home.
HARVARD
UNIVERSITY
show less
Authentication-Results: spf=softfail (sender IP is 217.10.155.156)
smtp.mailfrom=kaeri.re.kr; dkim ...
show moreAuthentication-Results: spf=softfail (sender IP is 217.10.155.156)
smtp.mailfrom=kaeri.re.kr; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=kaeri.re.kr;compauth=fail
reason=001
From: "OneDrive" <[email protected]>
Subject: the account ending in *****0169 1/29/2026
Message-ID: <[email protected]>
You have an incoming file in Microsoft OneDrive
A contact in your address book has sent you an encrypted file via OneDrive
<a href=3D"htt=
ps://ipfs.io/ipfs/bafkreif6ekqa<REDACTED>/#X" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp://w=
ww.naughty-or-nice.co/BZI/X">
Access File
</a>
Microsoft OneDrive makes it easy to save, share all types of files, with other people and devices on the web
show less
MORE SPAM FROM ICE PAYEE MICROSOFT.
Authentication-Results: spf=none (sender IP is 20.70.98.72)
...
show moreMORE SPAM FROM ICE PAYEE MICROSOFT.
Authentication-Results: spf=none (sender IP is 20.70.98.72)
smtp.helo=yoyytu.mlkcattle.net; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=hebrasil.com;compauth=fail
reason=001
From: ACAPlans <[email protected]>
Sender: qKy3nMp4K0viM9q2tsV4gIOkp<[email protected]>
Subject: Bundle up this winter with ACA health coverage 🛡️ kmm3u
Reply-To: [email protected]
See If You Are Eligible for Lower ACA Premiums
During the Open Enrollment Period, you may be eligible for ACA subsidy savings that may lower what you pay each month for coverage.
Using SUBSTACK redirects
MICROSOFT'S FINEST Prachi Singh [email protected] +1-425-707-5601 Dawn Bedard [email protected] +1-425-538-6637 Somesh Chaturmohta [email protected] +1-425-882-8080 Divya Quamara +1-425-882-8080
show less
Authentication-Results: spf=pass (sender IP is 168.107.56.227)
smtp.mailfrom=texasbuildersfinance. ...
show moreAuthentication-Results: spf=pass (sender IP is 168.107.56.227)
smtp.mailfrom=texasbuildersfinance.com; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none
header.from=texasbuildersfinance.com;compauth=pass reason=109
Subject: Custom Canvas Prints for Valentine’s Day
From: "Easy Canvas Prints Last Hours" <[email protected]>
PHISHING LINK: http://xALY.karpoff.org
easy CANVAS PRINTS
Valentine’s Day Is Approaching
A personal gift makes all the difference
This Valentine’s Day, surprise someone special with a custom canvas print made from a moment you both cherish.
For a limited time, our premium canvas prints are available at 86% off.
Many customers wait too long and miss the chance to order in time for Valentine’s Day delivery.
High-quality canvas material
Fade-resistant printing
A gift designed to last
As Valentine’s Day gets closer, availability becomes limited and prices return to normal.
show less
Authentication-Results: spf=pass (sender IP is 23.94.188.120)
smtp.mailfrom=starton.us; dkim=pass ...
show moreAuthentication-Results: spf=pass (sender IP is 23.94.188.120)
smtp.mailfrom=starton.us; dkim=pass (signature was verified)
header.d=kevindurantjerseys.us;dkim=pass (signature was verified)
header.d=lopezlopez.net;dmarc=pass action=none
header.from=kevindurantjerseys.us;compauth=pass reason=100
Subject: Leaf Filter Partnerrpxxi
From: "Research Brief ~rpxxi-"<[email protected]>
Message-Id: <nVzsrSxh-DpyXAbnu-tyl9-49501-CVDKSlIiz2k7@VI1EUR4565ER.eop-eur04.prod.klo>
Sender: "Research Brief ~rpxxi-"<[email protected]>
PHISHING LINKS FROM https://buyfoakleys.com
𝐓𝐮𝐫𝐧𝐬 𝐨𝐮𝐭, 𝐢𝐭 𝐰𝐚𝐬𝐧’𝐭 𝐝𝐢𝐬𝐜𝐢𝐩𝐥𝐢𝐧𝐞
Hi,
If you’ve ever wondered why your body
feels unpredictable despite doing
“everything right” — you’re not alone.
I felt the same way.
Then I learned about how hidden
biological stressors can quietly tax the
pancreas over time.
Not a diagnosis.
Not something dramatic.
show less
MORE SPAM FROM ICE PROFITEER MICROSOFT. SPAM USING THE SAME PATTERN REPORTED MULTIPLE TIMES.
Authen ...
show moreMORE SPAM FROM ICE PROFITEER MICROSOFT. SPAM USING THE SAME PATTERN REPORTED MULTIPLE TIMES.
Authentication-Results: spf=none (sender IP is 20.69.241.201)
smtp.helo=maximeimqgy.klmlzqyxigjchxrmedxmqu.id; dkim=none (message not
signed) header.d=none;dmarc=none action=none
header.from=69._ecoenergi.online;
From: Medvi Weight Losse<noreply@69._ecoenergi.online>
Subject: New Year’s: semaglutide delivered to you from $149
MICROSOFT SPONSORED PHISHING LINK: http://4.215.207.6
Safe, Convenient Weight Loss That Works
Starting at $149/month with our New Year's Sale.
Struggling to lose weight? MedVI offers physician-supervised programs using proven medications and support. Get started in minutes—everything is handled online.
MICROSOFT'S FINEST
Prachi Singh
[email protected]
+1-425-707-5601
Dawn Bedard
[email protected]
+1-425-538-6637
Somesh Chaturmohta
[email protected]
+1-425-882-8080
Divya Quamara
+1-425-882-8080
show less
MORE SPAM FROM ICE PROFITEER MICROSOFT. SPAM USING THE SAME PATTERN REPORTED MULTIPLE TIMES
Authent ...
show moreMORE SPAM FROM ICE PROFITEER MICROSOFT. SPAM USING THE SAME PATTERN REPORTED MULTIPLE TIMES
Authentication-Results: spf=none (sender IP is 51.105.48.66)
smtp.helo=kllhea.Machiavelli700.it; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=hebrasil.com;compauth=fail
reason=001
From: ACAPlans <[email protected]>
Sender: e7luFmrvIwxu58E1us5nMw0DN<[email protected]>
Subject: Bundle up this winter with ACA health coverage 🛡️ 09ufn
Reply-To: [email protected]
substack links redirecting to t6hgiliwt.com and tuqf4rtj3r.com
See If You Are Eligible for Lower ACA Premiums
During the Open Enrollment Period, you may be eligible for ACA subsidy savings that may lower what you pay each month for coverage.
Start a quick Healthcare.com survey to discover 2026 Marketplace plans, explore potential tax subsidy credits, and find options that may match your preferred doctors and prescriptions.
show less
Authentication-Results: spf=fail (sender IP is 217.10.155.156)
smtp.mailfrom=seoul.go.kr; dkim=non ...
show moreAuthentication-Results: spf=fail (sender IP is 217.10.155.156)
smtp.mailfrom=seoul.go.kr; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=seoul.go.kr;compauth=fail
reason=001
From: "Agent Manger" <[email protected]>
Subject: Property Document File !!!
You've received a document titled Service Agreement from Angel Height for your review and signature.
Please click below to securely view and sign the document:
REVIEW FILE
If you can't click the button, copy and paste this link into your browser:
Document ID: AHS-SRV-0098
https://ipfs.io/ipfs/X
show less
MICROSOFT SPONSORED SCAM
Authentication-Results: spf=none (sender IP is 48.218.141.5)
smtp.helo=c ...
show moreMICROSOFT SPONSORED SCAM
Authentication-Results: spf=none (sender IP is 48.218.141.5)
smtp.helo=consequuntursrgnc.se9jz7vqn.store; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=91._ecoenergi.online;
From: AARP Offer<noreply@91._ecoenergi.online>
Subject: Final Call: AARP Member Benefits Ending Soon ⏳
MICROSOFT SPONSORED PHISHING LINK: http://4.215.207.6
$15 AARP Membership — pick your free gift
Enjoy member only discounts,online tools and resources plus hun of everyday benefits to help you do more.
Your AARP Membership also gives you access to:
Online fraud prevention resources [LOL!]
Brain health tips, tools and games
Driver safety courses
AARP The Magazine - the world’s #1 most distributed magazine
And more...
MICROSOFT'S FINEST
Prachi Singh
[email protected]
+1-425-707-5601
Dawn Bedard
[email protected]
+1-425-538-6637
Somesh Chaturmohta
[email protected]
+1-425-882-8080
Divya Quamara
+1-425-882-8080
show less
PhishingEmail SpamSpoofing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.