๐บ๐ธ
2a01:111:f400:7e89::203
04 Apr 2023
Return-Path: <[email protected] >
Received: from NAM10-MW2-obe.outbound.protection.o ...
show more
Return-Path: <[email protected] >
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10lp20203.outbound.protection.outlook.com. [2a01:111:f400:7e89::203])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::203 as permitted sender) client-ip=2a01:111:f400:7e89::203;
Subject: Confirmation iPh219
From: Kohls Department <[email protected] >
X-OriginatorOrg: dlvyipjx.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Apr 2023 13:47:38.0383 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4635f7ed-4218-457f-033b-08db3449fccb
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3c6181e1-3d28-4d8a-ba4b-4cf82adc8eca;Ip=[20.7.176.79];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT101.eop-nam10.prod.protection.outlook.com
<area href="https://rtfhgfujyt-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5a::203
04 Apr 2023
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12lp20203.outbound.protecti ...
show more
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12lp20203.outbound.protection.outlook.com. [2a01:111:f400:fe5a::203])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5a::203 as permitted sender) client-ip=2a01:111:f400:fe5a::203;
From: "You'veBeenChosen X" <[email protected] >
Subject: Car Golf Cart Exclusive Rewards For You
X-OriginatorOrg: ibno1370.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Apr 2023 14:27:12.4312 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f7db041a-51d1-411f-00cc-08db344f840d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7749ac19-68f2-4e27-92bc-cc7173eaf9a7;Ip=[40.124.43.100];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT039.eop-nam12.prod.protection.outlook.com
<area href="https://rfsgetedgfted-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7eae::201
04 Apr 2023
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp20201.outbound.protecti ...
show more
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp20201.outbound.protection.outlook.com. [2a01:111:f400:7eae::201])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7eae::201 as permitted sender) client-ip=2a01:111:f400:7eae::201;
Subject: Confirmation-04971*Rlk2
From: Dewalt Power Station Department <[email protected] >
X-OriginatorOrg: mbywlitk.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Apr 2023 15:46:06.7583 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 34279eea-c692-402a-84b0-08db345a89f7
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=848764fa-ecb4-48dd-9b0f-19d149eda85a;Ip=[13.69.133.248];Helo=[7pvx.hedronhit.shop]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT093.eop-nam10.prod.protection.outlook.com
<area href="https://RGFhd35f4h5sfdrt-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e88::209
03 Apr 2023
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protectio ...
show more
Return-Path: <[email protected] >
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10lp20209.outbound.protection.outlook.com. [2a01:111:f400:7e88::209])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e88::209 as permitted sender) client-ip=2a01:111:f400:7e88::209;
From: Walmart <[email protected] >
Subject: Please confirm receipt
X-OriginatorOrg: ztwvkbhx.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6718b7cd-c976-4b16-43b6-08db32d526ee
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=6e19ae8b-da79-4d9b-8eb4-ed579d3e3c51;Ip=[104.215.82.246];Helo=[1x5m.yahoo.com]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT027.eop-nam12.prod.protection.outlook.com
<area href="https://fdsg585hgf-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://fdsg585hgf-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7eae::201
03 Apr 2023
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp20201.outbound.protecti ...
show more
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp20201.outbound.protection.outlook.com. [2a01:111:f400:7eae::201])
From: "Kohl's Customer Support" <[email protected] >
Subject: Confirmation-80755
X-OriginatorOrg: bcfluaxg.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 44149aad-051b-4b68-01a4-08db32b14374
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b3889e52-0408-4370-b018-49fcfd3456ec;Ip=[13.84.213.195];Helo=[hx0f.thetelephone.store]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM11FT078.eop-nam11.prod.protection.outlook.com
<a HREF="https://FRZCLDS2C-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<AReA HrEF="https://SXGBGTQRLLG-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://BZUU4VODX-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e83::200
03 Apr 2023
Received: from NAM02-DM3-obe.outbound.protection.outlook.com (mail-dm3nam02lp20200.outbound.protecti ...
show more
Received: from NAM02-DM3-obe.outbound.protection.outlook.com (mail-dm3nam02lp20200.outbound.protection.outlook.com. [2a01:111:f400:7e83::200])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e83::200 as permitted sender) client-ip=2a01:111:f400:7e83::200;
From: Nonstick_Cookware <[email protected] >
Subject: YOUR_REWARD_(New)
X-OriginatorOrg: wthomazu.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 552aa025-3d2c-4b90-976a-08db338af140
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ff66ed86-a89c-41d7-abd0-52ed134e5e22;Ip=[51.105.30.89];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT056.eop-nam11.prod.protection.outlook.com
<area href="https://dgsdgsedszfr-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://dgsdgsedszfr-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7ea9::209
03 Apr 2023
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02lp20209.outbound.protecti ...
show more
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02lp20209.outbound.protection.outlook.com. [2a01:111:f400:7ea9::209])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7ea9::209 as permitted sender) client-ip=2a01:111:f400:7ea9::209;
Subject: Confirmation 2323
From: "KOHL'S Unlocked" <[email protected] >
X-OriginatorOrg: Hooksfruit.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f500bb9b-84a1-4168-e953-08db3398c120
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=6ad3ae39-d4cd-49d9-b8a1-97a9e5635d12;Ip=[20.160.24.203];Helo=[pka1.creativitynoble.online]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT109.eop-nam12.prod.protection.outlook.com
<area href="https://3sd5fh435fdg-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://3sd5fh435fdg-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f403:c007::1
03 Apr 2023
Return-Path: <[email protected] >
Received: from CO1PR02CU001.outbound.protection.outlook.c ...
show more
Return-Path: <[email protected] >
Received: from CO1PR02CU001.outbound.protection.outlook.com (mail-westus2azlp170110001.outbound.protection.outlook.com. [2a01:111:f403:c007::1])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f403:c007::1 as permitted sender) client-ip=2a01:111:f403:c007::1;
From: Member Survey Panel <[email protected] >
Subject: You've Been Chosen-(New)
X-OriginatorOrg: xzbuafyl.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c810877c-b66f-4760-31fe-08db33998135
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b6a9e53b-742a-4f75-8693-786a2e6cac03;Ip=[52.157.179.234];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT038.eop-nam10.prod.protection.outlook.com
<area href="https://dghsgsrh-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://dghsgsrh-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7eab::204
03 Apr 2023
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11lp20204.outbound.protecti ...
show more
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11lp20204.outbound.protection.outlook.com. [2a01:111:f400:7eab::204])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7eab::204 as permitted sender) client-ip=2a01:111:f400:7eab::204;
Subject: Confirmation-66183
From: "Craftsman Wet/Dry Vacuum" <[email protected] >
X-OriginatorOrg: iHoneydustries.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1df4d194-16c8-4b49-ab4e-08db339b6671
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a291b985-ea82-462f-b217-2073a1f22139;Ip=[104.215.102.88];Helo=[l70p.crazygamma.online]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM10FT009.eop-nam10.prod.protection.outlook.com
<area href="https://3dzsyrh35rt-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://3dzsyrh35rt-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐ซ๐ท
83.167.42.66
02 Apr 2023
Return-Path: <[email protected] >
Received: from smtp2.fc-sante.fr (smtp2.fc-sante.fr. [83.167.42.6 ...
show more
Return-Path: <[email protected] >
Received: from smtp2.fc-sante.fr (smtp2.fc-sante.fr. [83.167.42.66])
Received-SPF: pass (google.com: domain of [email protected] designates 83.167.42.66 as permitted sender) client-ip=83.167.42.66;
Subject: Representative Role Inquiry
From: Elise Arnoux <[email protected] >
Thread-Topic: Representative Role Inquiry
Message-ID: <[email protected] >
Reply-To: "[email protected] " <[email protected] >
We would like to retain your services as our Company's Independent Represen=
tative in your region for a recent job opening with Tomobishu Equipments Co=
., Ltd. as a result, we are recommending you for this part-time consultancy=
/contract role.
Should you be interested in this role, kindly reply for further details.
Regards,
Elise Arnoux,
Recruitment Consultant.
show less
Phishing
Email Spam
Spoofing
๐ซ๐ท
83.167.42.66
02 Apr 2023
Return-Path: <[email protected] >
Received: from smtp2.fc-sante.fr (smtp2.fc-sante.fr. [83.167.42.6 ...
show more
Return-Path: <[email protected] >
Received: from smtp2.fc-sante.fr (smtp2.fc-sante.fr. [83.167.42.66])
Received-SPF: pass (google.com: domain of [email protected] designates 83.167.42.66 as permitted sender) client-ip=83.167.42.66;
Subject: Representative Role Inquiry
From: Elise Arnoux <[email protected] >
Thread-Topic: Representative Role Inquiry
Reply-To: "[email protected] " <[email protected] >
Accept-Language: fr-FR, en-US
We would like to retain your services as our Company's Independent Represen=
tative in your region for a recent job opening with Tomobishu Equipments Co=
., Ltd. as a result, we are recommending you for this part-time consultancy=
/contract role.
Should you be interested in this role, kindly reply for further details.
Regards,
Elise Arnoux,
Recruitment Consultant.
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
142.202.190.17
01 Apr 2023
Return-Path: <[email protected] >
Received: from chillsperu.site (chillsperu.si ...
show more
Return-Path: <[email protected] >
Received: from chillsperu.site (chillsperu.site. [142.202.190.17])
Received-SPF: pass (google.com: domain of [email protected] designates 142.202.190.17 as permitted sender) client-ip=142.202.190.17;
From: "X" <[email protected] >
Subject: ๐Congratulations!๐ ๐ฒ๐ฐ deposit sent to you ๐ฒ๐ฐ------------โญ๏ธ 23677266
Walmart
X @gmail.com
Email Number #4
( Regarding Your funds confirmation)
Hi, X @gmail.com
We're having some trouble to deliver your $1000.00 To Your Walmartยฎ Account.
Please complete your contact info to make sure is properly delivered to you. We will contact you using this information
This email is intended for:
Email: X @gmail.com
Date: Sat, 01 Apr 2023 17:38:02 +0200
Statu: Pending confirmation
Cash: $1000.00
This transaction will remain Pending until your confirmation.
Confirm here
https://storage.googleapis.com/9a80993c55235d9
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e88::209
31 Mar 2023
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10lp20209.outbound.protecti ...
show more
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10lp20209.outbound.protection.outlook.com. [2a01:111:f400:7e88::209])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e88::209 as permitted sender) client-ip=2a01:111:f400:7e88::209;
From: CVS <[email protected] >
Subject: Porta-Blitz Blender
Unlocked
X-OriginatorOrg: nkpazebc.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 74b43bfe-68f3-4ecf-0976-08db3187e923
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=71a12e37-70be-4b01-ae82-281db915c620;Ip=[23.101.55.228];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT054.eop-nam10.prod.protection.outlook.com
<area href="https://2uy6o854uy364d3fgfd-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://2uy6o854uy364d3fgfd-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5b::204
31 Mar 2023
Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12lp20204.outbound.protecti ...
show more
Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12lp20204.outbound.protection.outlook.com. [2a01:111:f400:fe5b::204])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5b::204 as permitted sender) client-ip=2a01:111:f400:fe5b::204;
From: Kohls Department <[email protected] >
Subject: Ninja NeverDull Premium Knife Set Department
X-OriginatorOrg: ntgsxfbq.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4828040f-dead-4aff-f0d7-08db318c6a76
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c2774164-1a50-4e53-a265-73a1607d8801;Ip=[20.12.177.94];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT069.eop-nam12.prod.protection.outlook.com
<area href="https://0rNdJKxsXDYf-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://7qq6MitMzhD-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f403:c007::1
30 Mar 2023
Received: from CO1PR02CU001.outbound.protection.outlook.com (mail-westus2azlp170110001.outbound.prot ...
show more
Received: from CO1PR02CU001.outbound.protection.outlook.com (mail-westus2azlp170110001.outbound.protection.outlook.com. [2a01:111:f403:c007::1])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f403:c007::1 as permitted sender) client-ip=2a01:111:f403:c007::1;
From: "Kohls_Surprise!!" <[email protected] >
Subject: X, PLEASE CONFIRM RECEIPT
Sender: [email protected]
X-OriginatorOrg: fqgk3163.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ab123b20-ff08-4d73-7982-08db2fee1a92
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e4e15a34-bc9b-4ae1-9924-279438014200;Ip=[52.148.198.108];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT113.eop-nam12.prod.protection.outlook.com
<area href="https://Lku85ja6co-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://YedgIMXpQ0w-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe59::201
30 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400: ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe59::201 as permitted sender) client-ip=2a01:111:f400:fe59::201;
Subject: Expiring Soon!!!
From: CVS Customer Support <[email protected] >
X-OriginatorOrg: wusj5423.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d8d1525b-7b76-4ded-177b-08db2ff44578
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa0c7c3f-ac3b-4d30-a05e-3d2a7c207655;Ip=[20.4.22.135];Helo=[gi5n.mont.ru]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT111.eop-nam12.prod.protection.outlook.com
<a HREF="https://SJZRIAECN-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X"
<AReA HrEF="https://CTXQJAODT52HX-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://QHJ6US4-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e8d::208
30 Mar 2023
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20208.outbound.protecti ...
show more
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam04lp20208.outbound.protection.outlook.com. [2a01:111:f400:7e8d::208])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e8d::208 as permitted sender) client-ip=2a01:111:f400:7e8d::208;
From: "KOHLS_CUSTOMER SUPPORT!!" <[email protected] >
Subject: PLEASE CONFIRM RECEIPT !!
X-OriginatorOrg: euxo7313.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: aa6ffa7e-cf68-4761-a40d-08db2fe9906f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5eca5a8a-0d75-4857-9f2f-4f8042dc6a0b;Ip=[40.124.43.100];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT026.eop-nam12.prod.protection.outlook.com
<area href="https://QQVJ6JQRKc-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
<area href="https://COT39Bx5Qmv-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::202
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::202 as permitted sender) client-ip=2a01:111:f400:7e89::202;
From: COVID-19 <[email protected] >
Subject: Rapid Tests At Home
X-OriginatorOrg: wcdtevan.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ad75f8fd-2471-4ab5-be7e-08db2fb800f9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=727dd166-f29e-4aca-bc5c-fa321664a26a;Ip=[20.90.75.147];Helo=[wm6j.gothamserie.online]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT059.eop-nam10.prod.protection.outlook.com
<a HREF="https://BTFSQIQC4-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://AGZ7VFT6LJHUU-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://CABFK3W-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5b::206
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f40 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5b::206 as permitted sender) client-ip=2a01:111:f400:fe5b::206;
From: Energy Bill Cruncher <[email protected] >
Subject: new_program_will_cut_your_POWER_bill_in_half
X-OriginatorOrg: M1725US.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 86f4ac4d-6f7c-4625-d291-08db2fad51f2
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d650ecb9-00e7-4069-ba92-7921bd65e9ce;Ip=[20.122.65.39];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT114.eop-nam10.prod.protection.outlook.com
<a HREF="https://8XPSG-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X
<AReA HrEF="https://OIBFBTBM099VF-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://LBIKPDM-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f403:c111::5
28 Mar 2023
Received: from DM4PR02CU001-vft-obe.outbound.protection.outlook.com (mail-centralusazlp170120005.out ...
show more
Received: from DM4PR02CU001-vft-obe.outbound.protection.outlook.com (mail-centralusazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c111::5])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f403:c111::5 as permitted sender) client-ip=2a01:111:f403:c111::5;
Subject: SAVE $300 ON ANY NEW AUTO WARRANTY PURCHASE
From: -ENDURANCE AUTO_Warranty <[email protected] >
X-OriginatorOrg: dnwzkcao.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2a946094-c3b5-44f6-3e9e-08db2f2af50f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54e77e7-e0c3-4129-8029-27ac023bf204;Ip=[13.84.214.238];Helo=[n640.yurcovskyolya.ru]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT029.eop-nam12.prod.protection.outlook.com
<area href="https://RFFCQKTCW-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<area href="https://YHY8ANYLBCL-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::205
28 Mar 2023
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10lp20205.outbound.protecti ...
show more
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10lp20205.outbound.protection.outlook.com. [2a01:111:f400:7e89::205])
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::205 as permitted sender) client-ip=2a01:111:f400:7e89::205;
From: ENDURANCE_AUTO_618 <[email protected] >
Subject: Save-1,000$ On Car Repairs. Free Quote
X-OriginatorOrg: xalcbkze.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d8fa5046-a7be-40a4-fd36-08db2f2e818f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b73debad-6ccd-4fdd-9d84-aaffda8b79fd;Ip=[13.94.71.142];Helo=[x2j8.empterswifi.xyz]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT063.eop-nam12.prod.protection.outlook.com
<area href="https://HDIJBW4GC-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<area href="https://PZFXKUNTE1V-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
show less
Phishing
Email Spam
Spoofing
๐ฎ๐ช
2a01:111:f400:7e0c::206
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e0 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e0c::206 as permitted sender) client-ip=2a01:111:f400:7e0c::206;
From: Samsung Galaxy S23 Ultra Unlocked <[email protected] >
Subject: Congratulations-Details Apply
X-OriginatorOrg: ozwsmtbv.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2488a223-0ff2-464a-dcf0-08db2f866ac0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=41227802-b20d-43dd-aa07-18462cb198f3;Ip=[20.254.56.192];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: DB8EUR06FT048.eop-eur06.prod.protection.outlook.com
<a HREF="https://DKK8X2TE0KH3X7-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://7ZK8UU1OHYJ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA TArgEt="" ALt= tItlE= Href="https://HNQIAXNJI-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:7e89::208
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f4 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e89::208 as permitted sender) client-ip=2a01:111:f400:7e89::208;
Subject: Confirmation 31544
From: YDicks Sporting Goods Rewards <[email protected] >
X-OriginatorOrg: nmxhlwbt.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1aeb4dda-d041-4dc4-c5a5-08db2f939d26
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=422e5a8a-3aec-4d4a-9233-bcfa769cb8fd;Ip=[13.84.213.195];Helo=[hx0f.thetelephone.store]
X-MS-Exchange-CrossTenant-AuthSource: MW2NAM12FT111.eop-nam12.prod.protection.outlook.com
<a HREF="https://XQCQDQER2-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://WIWXPXICXFQAE-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://NRFYBRQ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐ซ๐ฎ
2a01:111:f400:7e1f::207
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e1f::2 ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:7e1f::207 as permitted sender) client-ip=2a01:111:f400:7e1f::207;
From: Samsung Galaxy S23 Ultra Rewards <[email protected] >
Subject: You've been chosen!
X-OriginatorOrg: clezknvb.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3da96b4d-306b-423a-0b0a-08db2f94c398
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d2cc39a4-5cea-40d3-9fd8-c4cfd0d7fe09;Ip=[52.173.131.88];Helo=[chinsandquills.shop]
X-MS-Exchange-CrossTenant-AuthSource: VI1EUR06FT043.eop-eur06.prod.protection.outlook.com
<a HREF="https://3AB6SQJJQWPJRQ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA HrEF="https://KBIDTLFGXFZ-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://3ILLTD0VS-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
show less
Phishing
Email Spam
Spoofing
๐บ๐ธ
2a01:111:f400:fe5a::208
28 Mar 2023
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe ...
show more
Received-SPF: pass (google.com: domain of [email protected] designates 2a01:111:f400:fe5a::208 as permitted sender) client-ip=2a01:111:f400:fe5a::208;
From: Consumer Rewards <[email protected] >
Subject: Final Notice Coming for a Rachel Ray Cucina Cookware Set Reward
X-OriginatorOrg: aclmbdzw.onmicrosoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6aaf73ef-c7fd-4383-8798-08db2f9ac4cc
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c623daf5-a0ff-49d3-9fbb-01fd5180e0b6;Ip=[20.12.177.75];Helo=[backdisk.club]
X-MS-Exchange-CrossTenant-AuthSource: DM6NAM10FT090.eop-nam10.prod.protection.outlook.com
<a HREF="https://Z54WBO4PXHVAJL-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X">
<AReA HrEF="https://9POMCRPJTLF-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X>
<AReA Href="https://KU6CDCUYX-1b8897185d70b198c119e1d2b7efd8a2.ssl.cf1.rackcdn.com/X" >
show less
Phishing
Email Spam
Spoofing