๐บ๐ธ
2a01:111:f403:c007::1
30 Mar 2023
Received: from CO1PR02CU001.outbound.protection.outlook.com (mail-westus2azlp170110001.outbound.prot ...
show more
Received: from CO1PR02CU001.outbound.protection.outlook.com (mail-westus2azlp170110001.outbound.protection.outlook.com. [2a01:111:f403:c007::1])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f403:c007::1 as permitted sender) client-ip=2a01:111:f403:c007::1;
From: "Kohls_Surprise!!" <[email protected] >
Subject: X, PLEASE CONFIRM RECEIPT
Sender: [email protected]
X-OriginatorOrg: fqgk3163.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ab123b20-ff08-4d73-7982-08db2fee1a92
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e4e15a34-bc9b-4ae1-9924-279438014200;Ip=[52.148.198.108];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT113.eop-nam12.prod.protection.outlook.com
<area href="https://Lku85ja6co-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://YedgIMXpQ0w-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe59::201
30 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400: ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe59::201 as permitted sender) client-ip=2a01:111:f400:fe59::201;
Subject: Expiring Soon!!!
From: CVS Customer Support <[email protected] >
X-OriginatorOrg: wusj5423.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d8d1525b-7b76-4ded-177b-08db2ff44578
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa0c7c3f-ac3b-4d30-a05e-3d2a7c207655;Ip=[20.4.22.135];Helo=[gi5n.mont.ru]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT111.eop-nam12.prod.protection.outlook.com
<a HREF="https://SJZRIAECN-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X"
<AReA HrEF="https://CTXQJAODT52HX-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://QHJ6US4-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e8d::208
30 Mar 2023
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20208.outbound.protecti ...
show more
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20208.outbound.protection.outlook.com. [2a01:111:f400:7e8d::208])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e8d::208 as permitted sender) client-ip=2a01:111:f400:7e8d::208;
From: "KOHLS_CUSTOMER SUPPORT!!" <[email protected] >
Subject: PLEASE CONFIRM RECEIPT !!
X-OriginatorOrg: euxo7313.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: aa6ffa7e-cf68-4761-a40d-08db2fe9906f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5eca5a8a-0d75-4857-9f2f-4f8042dc6a0b;Ip=[40.124.43.100];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT026.eop-nam12.prod.protection.outlook.com
<area href="https://QQVJ6JQRKc-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://COT39Bx5Qmv-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::202
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::202 as permitted sender) client-ip=2a01:111:f400:7e89::202;
From: COVID-19 <[email protected] >
Subject: Rapid Tests At Home
X-OriginatorOrg: wcdtevan.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ad75f8fd-2471-4ab5-be7e-08db2fb800f9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=727dd166-f29e-4aca-bc5c-fa321664a26a;Ip=[20.90.75.147];Helo=[wm6j.gothamserie.online]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT059.eop-nam10.prod.protection.outlook.com
<a HREF="https://BTFSQIQC4-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://AGZ7VFT6LJHUU-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://CABFK3W-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5b::206
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f40 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5b::206 as permitted sender) client-ip=2a01:111:f400:fe5b::206;
From: Energy Bill Cruncher <[email protected] >
Subject: new_program_will_cut_your_POWER_bill_in_half
X-OriginatorOrg: M1725US.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 86f4ac4d-6f7c-4625-d291-08db2fad51f2
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d650ecb9-00e7-4069-ba92-7921bd65e9ce;Ip=[20.122.65.39];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT114.eop-nam10.prod.protection.outlook.com
<a HREF="https://8XPSG-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X
<AReA HrEF="https://OIBFBTBM099VF-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://LBIKPDM-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f403:c111::5
28 Mar 2023
Received: from DM4PR02CU001-vft-obe.outbound.protection.outlook.com (mail-centralusazlp170120005.out ...
show more
Received: from DM4PR02CU001-vft-obe.outbound.protection.outlook.com (mail-centralusazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c111::5])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f403:c111::5 as permitted sender) client-ip=2a01:111:f403:c111::5;
Subject: SAVE $300 ON ANY NEW AUTO WARRANTY PURCHASE
From: -ENDURANCE AUTO_Warranty <[email protected] >
X-OriginatorOrg: dnwzkcao.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2a946094-c3b5-44f6-3e9e-08db2f2af50f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54e77e7-e0c3-4129-8029-27ac023bf204;Ip=[13.84.214.238];Helo=[n640.yurcovskyolya.ru]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT029.eop-nam12.prod.protection.outlook.com
<area href="https://RFFCQKTCW-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<area href="https://YHY8ANYLBCL-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::205
28 Mar 2023
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10lp20205.outbound.protecti ...
show more
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10lp20205.outbound.protection.outlook.com. [2a01:111:f400:7e89::205])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::205 as permitted sender) client-ip=2a01:111:f400:7e89::205;
From: ENDURANCE_AUTO_618 <[email protected] >
Subject: Save-1,000$ On Car Repairs. Free Quote
X-OriginatorOrg: xalcbkze.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d8fa5046-a7be-40a4-fd36-08db2f2e818f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b73debad-6ccd-4fdd-9d84-aaffda8b79fd;Ip=[13.94.71.142];Helo=[x2j8.empterswifi.xyz]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT063.eop-nam12.prod.protection.outlook.com
<area href="https://HDIJBW4GC-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<area href="https://PZFXKUNTE1V-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
show less
Phishing
Email Spam
Spoofing
๐ฎ๐ช
2a01:111:f400:7e0c::206
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e0 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e0c::206 as permitted sender) client-ip=2a01:111:f400:7e0c::206;
From: Samsung Galaxy S23 Ultra Unlocked <[email protected] >
Subject: Congratulations-Details Apply
X-OriginatorOrg: ozwsmtbv.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2488a223-0ff2-464a-dcf0-08db2f866ac0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=41227802-b20d-43dd-aa07-18462cb198f3;Ip=[20.254.56.192];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: DB8EUR06FT048.eop-eur06.prod.protection.outlook.com
<a HREF="https://DKK8X2TE0KH3X7-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://7ZK8UU1OHYJ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA TArgEt="" ALt= tItlE= Href="https://HNQIAXNJI-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::208
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f4 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::208 as permitted sender) client-ip=2a01:111:f400:7e89::208;
Subject: Confirmation 31544
From: YDicks Sporting Goods Rewards <[email protected] >
X-OriginatorOrg: nmxhlwbt.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1aeb4dda-d041-4dc4-c5a5-08db2f939d26
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=422e5a8a-3aec-4d4a-9233-bcfa769cb8fd;Ip=[13.84.213.195];Helo=[hx0f.thetelephone.store]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT111.eop-nam12.prod.protection.outlook.com
<a HREF="https://XQCQDQER2-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://WIWXPXICXFQAE-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://NRFYBRQ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐ซ๐ฎ
2a01:111:f400:7e1f::207
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e1f::2 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e1f::207 as permitted sender) client-ip=2a01:111:f400:7e1f::207;
From: Samsung Galaxy S23 Ultra Rewards <[email protected] >
Subject: You've been chosen!
X-OriginatorOrg: clezknvb.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3da96b4d-306b-423a-0b0a-08db2f94c398
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d2cc39a4-5cea-40d3-9fd8-c4cfd0d7fe09;Ip=[52.173.131.88];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: VI1EUR06FT043.eop-eur06.prod.protection.outlook.com
<a HREF="https://3AB6SQJJQWPJRQ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://KBIDTLFGXFZ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://3ILLTD0VS-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5a::208
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5a::208 as permitted sender) client-ip=2a01:111:f400:fe5a::208;
From: Consumer Rewards <[email protected] >
Subject: Final Notice Coming for a Rachel Ray Cucina Cookware Set Reward
X-OriginatorOrg: aclmbdzw.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6aaf73ef-c7fd-4383-8798-08db2f9ac4cc
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c623daf5-a0ff-49d3-9fbb-01fd5180e0b6;Ip=[20.12.177.75];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT090.eop-nam10.prod.protection.outlook.com
<a HREF="https://Z54WBO4PXHVAJL-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<AReA HrEF="https://9POMCRPJTLF-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://KU6CDCUYX-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e8a::207
28 Mar 2023
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10lp20207.outbound.protecti ...
show more
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10lp20207.outbound.protection.outlook.com. [2a01:111:f400:7e8a::207])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e8a::207 as permitted sender) client-ip=2a01:111:f400:7e8a::207;
From: Consumer Rewards <[email protected] >
Subject: _Final Notice Coming for a Rachel Ray Cucina Cookware Set Reward_
X-OriginatorOrg: vesmcdhu.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 581cc2bd-117c-42ca-b6a8-08db2f9ed27d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c62513e9-2e57-4e22-ba8f-1c67dc04717b;Ip=[65.52.226.138];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT110.eop-nam12.prod.protection.outlook.com
<AReA HrEF="https://1VALHBQHLDC-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://DEQCLZOLA-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐ญ๐ฐ
210.87.247.10
27 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 210.87.247.10 as permi ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 210.87.247.10 as permitted sender) client-ip=210.87.247.10;
Reply-To: <[email protected] >
From: Kate Elizabeth Heinzelman <[email protected] >
Subject: Re: DECLARATION ON PAYMENT CANCELLATION
Please declare accordingly as stated below and return to this office immediately.
I [your names] of [your address and country] I solemnly and willingly declare that the transaction in my name valued at $10,500,000 that originated from me should be canceled. I would never want to have any involvement that will require me to pay to receive the funds as I see it as a scam, and I never wish to do anything with it since I don't have the money to pay for any fee or charge that is now seen as a scam.
Please, let the UN/AU/American government take the funds and erase my name from anything related to this fund release because I would never be interested in receiving the funds anymore.
show less
Phishing
Email Spam
Spoofing
๐ฆ๐น
2a01:111:f400:7e0e::203
27 Mar 2023
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04lp20203.outbound.protecti ...
show more
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04lp20203.outbound.protection.outlook.com. [2a01:111:f400:7e0e::203])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e0e::203 as permitted sender) client-ip=2a01:111:f400:7e0e::203;
From: KOHLS_Rewards_ <[email protected] >
Subject: You_HAVE won an_Rachel Ray Cucina Cookware Set!!!
X-OriginatorOrg: clzutsxm.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 412c1585-e7f1-48e5-2150-08db2e5fadd2
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=0f745d9f-de11-48f5-a2b9-85cd146df833;Ip=[23.101.55.159];Helo=[xaal.microsoftshop.site]
X-MS-Exchange-CrossTenant-AuthSource: VI1EUR06FT019.eop-eur06.prod.protection.outlook.com
<area href="https://xhHVHdQLIBpDj1-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://vVyE6pnWtx-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐ฆ๐น
2a01:111:f400:7e01::209
26 Mar 2023
Return-Path: <[email protected] >
Received: from EUR01-VE1-obe.outbound.protection.outlook ...
show more
Return-Path: <[email protected] >
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01lp20209.outbound.protection.outlook.com. [2a01:111:f400:7e01::209])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e01::209 as permitted sender) client-ip=2a01:111:f400:7e01::209;
From: HomeWarranty <[email protected] >
Subject: HowTo Cut Your Home RepairBills
X-OriginatorOrg: melawuso.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d3f885e3-4d43-49f7-b51e-08db2da056e4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e0f5edda-91a7-4423-bd79-f4e1866ef4ab;Ip=[20.12.177.94];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: AM7EUR06FT016.eop-eur06.prod.protection.outlook.com
<area href="https://uFtZDrbeEZasXf-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://6dkvW0j21o-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐ณ๐ฑ
2a01:111:f400:7e1b::208
25 Mar 2023
Return-Path: <[email protected] >
Received: from EUR05-AM6-obe.outbound.protection.ou ...
show more
Return-Path: <[email protected] >
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05lp20208.outbound.protection.outlook.com. [2a01:111:f400:7e1b::208])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e1b::208 as permitted sender) client-ip=2a01:111:f400:7e1b::208;
Subject: _24-Hour monitoring with ADT_
From: ADT <[email protected] >
X-OriginatorOrg: dekbsaum.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2023 00:11:39.1659 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 10ae1a1a-0255-4820-0ac6-08db2cc58168
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4a17bd9f-1faa-4347-a792-48dd034303ad;Ip=[104.215.82.246];Helo=[1x5m.yahoo.com]
X-MS-Exchange-CrossTenant-AuthSource: AM7EUR06FT005.eop-eur06.prod.protection.outlook.com
<area href="https://qLjkUH4nYyg-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e8d::205
24 Mar 2023
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20205.outbound.protecti ...
show more
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20205.outbound.protection.outlook.com. [2a01:111:f400:7e8d::205])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e8d::205 as permitted sender) client-ip=2a01:111:f400:7e8d::205;
From: CVS Surprise <[email protected] >
Subject: Confirmation iPh219
X-OriginatorOrg: banshee7817.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 17:14:15.6720 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 3a56e0be-aa6f-4094-7070-08db2c8b3241
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=46633028-709e-4740-a454-42fa88319897;Ip=[20.114.182.38];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT064.eop-nam12.prod.protection.outlook.com
<area href="https://P8GzUGnh14DE-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e88::204
24 Mar 2023
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protection.outlook. ...
show more
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10lp20204.outbound.protection.outlook.com. [2a01:111:f400:7e88::204])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e88::204 as permitted sender) client-ip=2a01:111:f400:7e88::204;
From: CVS Winner <[email protected] >
Subject: Confirmation iPh219
X-OriginatorOrg: struck3368.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 17:31:56.9459 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: ca6fdbb1-4b51-4864-6029-08db2c8daad5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4f88943e-3b8a-482e-828b-c0a921ba0501;Ip=[20.119.215.20];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT021.eop-nam12.prod.protection.outlook.com
<area href="https://n11xHAUssE8h-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e88::204
24 Mar 2023
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protection.out ...
show more
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10lp20204.outbound.protection.outlook.com. [2a01:111:f400:7e88::204])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e88::204 as permitted sender) client-ip=2a01:111:f400:7e88::204;
Subject: Confirmation_iPh219
From: Ace Hardware Customer Support <[email protected] >
X-OriginatorOrg: jumbo4925.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 14:45:34.4657 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2a31f4d6-939c-43a2-d8a4-08db2c766cc3
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=34c14694-9793-465d-87f7-9df45145774a;Ip=[20.7.176.79];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT054.eop-nam12.prod.protection.outlook.com
<area href="https://NMKteCmyNA6-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7eaa::324
24 Mar 2023
Return-Path: <>
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11hn20324. ...
show more
Return-Path: <>
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11hn20324.outbound.protection.outlook.com. [2a01:111:f400:7eaa::324])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7eaa::324 as permitted sender) client-ip=2a01:111:f400:7eaa::324;
Reply-To: riad <[email protected] >
Subject: Xbonus
From: Ace Surprise <[email protected] >
X-OriginatorOrg: compd.doormeal.cfd
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 14:18:00.7184 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: cf5eb77d-2b87-40ef-1d7d-08db2c729321
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ca407913-45f3-4b7b-8253-49221d9adf4d;Ip=[49.12.239.237];Helo=[compd.doormeal.cfd]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT090.eop-nam10.prod.protection.outlook.com
<a href="https://hfdjxhgk.blob.core.windows.net/X"><h2>Welcome to Our Team</h2></a>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe59::200
24 Mar 2023
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12lp20200.outbound.protecti ...
show more
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12lp20200.outbound.protection.outlook.com. [2a01:111:f400:fe59::200])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe59::200 as permitted sender) client-ip=2a01:111:f400:fe59::200;
From: LIMITED <[email protected] >
Subject: Kohls Customer Support
X-OriginatorOrg: NETORG7707027.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 14:12:00.2566 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 58f8f288-fa8e-48b6-ee2d-08db2c71bc33
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7280aaff-6a1d-4b41-aad2-4616132d677f;Ip=[13.84.214.238];Helo=[n640.yurcovskyolya.ru]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT003.eop-nam10.prod.protection.outlook.com
<area href="https://e8r7thy-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7eab::204
24 Mar 2023
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11lp20204.outbound.protecti ...
show more
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11lp20204.outbound.protection.outlook.com. [2a01:111:f400:7eab::204])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7eab::204 as permitted sender) client-ip=2a01:111:f400:7eab::204;
From: "Vivint.Home.Security USA" <[email protected] >
Subject: FREE Doorbell Camera with Vivint!
X-OriginatorOrg: dvag6714.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 02:17:55.0206 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: ff17427c-c314-40c2-6feb-08db2c0dfa84
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a9d1f724-e154-46af-bc0e-aad94acd2849;Ip=[13.94.71.142];Helo=[x2j8.empterswifi.xyz]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT008.eop-nam12.prod.protection.outlook.com
<area href="https://hfg57jhyyg-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐ฐ๐ท
2a01:111:f400:feae::205
24 Mar 2023
Received: from APC01-PSA-obe.outbound.protection.outlook.com (mail-psaapc01lp20205.outbound.protecti ...
show more
Received: from APC01-PSA-obe.outbound.protection.outlook.com (mail-psaapc01lp20205.outbound.protection.outlook.com. [2a01:111:f400:feae::205])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:feae::205 as permitted sender) client-ip=2a01:111:f400:feae::205;
Subject: First attempt for X (JustForToday)
From: NinjaKnife <[email protected] >
X-OriginatorOrg: xdbch.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2023 01:23:46.0182 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 54c2c745-2a43-45e1-828b-08db2c066a0b
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=0db5eaa9-422c-4ee0-8918-07e0c4cc6a11;Ip=[20.0.50.197];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: SG2APC01FT0003.eop-APC01.prod.protection.outlook.com
<area href="https://Py5ije8E80Cp-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe59::200
24 Mar 2023
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12lp20200.outbound.protecti ...
show more
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12lp20200.outbound.protection.outlook.com. [2a01:111:f400:fe59::200])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe59::200 as permitted sender) client-ip=2a01:111:f400:fe59::200;
From: "Vivint.SmartHome Security USA" <[email protected] >
Subject: GET a FREE Doorbell Cam with Vivint!
X-OriginatorOrg: tjao9594.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2023 22:40:37.7182 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b172ed86-e450-4920-d00a-08db2bef9fc5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=8344adeb-3fcc-4d7b-b3dd-73506c25c0d1;Ip=[20.160.24.203];Helo=[pka1.creativitynoble.online]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT010.eop-nam12.prod.protection.outlook.com
<area href="https://6esg768r-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐ฑ๐น
185.80.129.168
24 Mar 2023
Return-Path: <[email protected] >
Received: from flashor.net (flashor.net. [1 ...
show more
Return-Path: <[email protected] >
Received: from flashor.net (flashor.net. [185.80.129.168])
Received-SPF: pass (google.com: domain of [email protected] designates 185.80.129.168 as permitted sender) client-ip=185.80.129.168;
From: FreeCovidTests <[email protected] >
Subject: X,Your Insurance Covers 8 ๐๐ญ-๐ก๐จ๐ฆ๐ ๐๐จ๐ฏ๐ข๐ Tests (Claim Now) !
<a href="https://storage.googleapis.com/trap4ou01/X">
COVID-19
DELIVERED AT NO
COST TO YOU!
SELF TEST AT HOME!
Under the current Public Health Emergency, Your Health Insurance and Medicare will cover at-home COVID-19 test kits every month with
no out-of-pocket fees to you.
STEP 1
STEP 2
STEP 3
ยป claim your test now ยซ
show less
Phishing
Email Spam
Spoofing