Club email spam?

Hi there,

I just saw an email from my club offering Luxury handbags. Obviously, we did not send this out. I deleted the email without opening it.

Club: Duke Toastmasters
Number: 9097
Club site:  9097.toastmastersclubs.org/
Vanity URL: duketoastmasters.org

I'm not sure how to proceed to secure the email address and site. Any advice?

That is just spam, You will need to provide the raw email header so we can follow up on where exactly it came from.

Better spam than getting hacked! 

Here is the raw info. Thanks for your quick reply.Toastmasters Club 9097 on behalf of Luxury Bags <server@toastmastersclubs.org> reply-to:vpmuser@serairesorts.comto:"vpm@duketoastmasters.org" date:Jun 7, 2026, 2:57 PMsubject:[Duke TM Club] [Limited-Time Offer] Luxury Handbags Starting at $169mailed-by:toastmastersclubs.orgsigned-by:toastmastersclubs.orgsecurity: Standard encryption (TLS)  Learn more

That is not the full raw internet email header.

depending on your email client it will change how to find it. I suggest you use google.

Let's try this:Delivered-To: mescobar19@gmail.com
Received: by 2002:a05:6a11:fe19:b0:70a:8c94:380f with SMTP id lm25csp1382943pxc; Sun, 7 Jun 2026 11:57:00 -0700 (PDT)
X-Received: by 2002:a0c:ebcf:0:b0:8ce:ade5:e8fd with SMTP id 6a1803df08f44-8cee611fe57mr173430366d6.25.1780858620181; Sun, 07 Jun 2026 11:57:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1780858620; cv=none; d=google.com; s=arc-20240605; b=Ci6arQDWdd6ZOZ+TXk2QfiaexCuINC6x2pEQYtQtPZXZB83sqKT+f6LCZGxSb6FCZg bWqhrbtmvvn/qz4NRk1iHuOIK1+QhVSbZpH9imlDa08D3BnkhtumNedImasd2cxdgzvb 8r7Pq1Qmu4FU+IUrCHuiFM6mKbCKbysnqp3XLQiDKvsauxnjnq1DU1bmfglix9ytEbi4 KRcqfHGhMWY+m+84StKaVxVxbBwmEmDcdkcIaYiVMRXiU5Mx1NduoetGT+X1r5IDtvCI 4JvpvETw5Pcb55LvnUbOb7YqXEMsCAqN2qDsFOvXbAx6zRzNCB4rZX8bQB4whDHx+NY5 f4gw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=dkim-signature:to:reply-to:errors-to:sender:from :content-transfer-encoding:mime-version:subject:date:message-id; bh=Zb68TJabKij2Ns2AyyFC3KqQUjwuOplMf5IdK+rRDf0=; fh=lOBptLfmO56EdyjTD4t/s+NdoOAt0VosI2W7Pr2vaiI=; b=N6dgmV0l3e4vHliK+DUlKtktgCarE+QHQkq37koHgYBR+PGWOSOx3/pcyB00BMhIex ZedKnPg5kpP0qVvPP0/6t5MOC+BKhIi/uMhgmAu9Vhbwx4kzVlzL23++s3oZSYu2CIyj B74vhdM4zNHo/dspyVkHOyNb09XKbyQMvRfT3fmX4uJ/f+JxXFv5H/V9fzSJBm9QKteL rVdhRJy3GhHmxW3fg0mvfNSU41ChAs/m+IUTd4wqfLjBC4sJDmXXpfMUlI4/d7HVyrg9 8TsGWGt+OE/iaO2xSD4ED6Nd+RIA4Z9iwILRi3uBCT6CqBFNMNzhwG/CUoy6sYxhQokm ZY1g==; dara=google.com
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@toastmastersclubs.org header.s=default header.b=b7buaDY6; spf=pass (google.com: domain of server@toastmastersclubs.org designates 50.19.253.65 as permitted sender) smtp.mailfrom=server@toastmastersclubs.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=toastmastersclubs.org
Return-Path: <server@toastmastersclubs.org>
Received: from toastmastersclubs.org (toastmastersclubs.org. [50.19.253.65]) by mx.google.com with ESMTPS id 6a1803df08f44-8ceccdf2577si202345516d6.161.2026.06.07.11.57.00 for <mescobar19@gmail.com> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 07 Jun 2026 11:57:00 -0700 (PDT)
Received-SPF: pass (google.com: domain of server@toastmastersclubs.org designates 50.19.253.65 as permitted sender) client-ip=50.19.253.65;
Authentication-Results: mx.google.com; dkim=pass header.i=@toastmastersclubs.org header.s=default header.b=b7buaDY6; spf=pass (google.com: domain of server@toastmastersclubs.org designates 50.19.253.65 as permitted sender) smtp.mailfrom=server@toastmastersclubs.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=toastmastersclubs.org
Received: from localhost.localdomain (toastmastersclubs.org [50.19.253.65]) by toastmastersclubs.org (8.17.1/8.17.1) with ESMTP id 657IuxoB3679462 for <mescobar19@gmail.com>; Sun, 7 Jun 2026 18:56:59 GMT
Message-Id: <202606071856.657IuxoB3679462@toastmastersclubs.org>
Received: from serairesorts.com ([66.55.78.111]) by toastmastersclubs.org (8.17.1/8.17.1) with ESMTPS id 657IuuGW3679417 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <vpm@duketoastmasters.org>; Sun, 7 Jun 2026 18:56:57 GMT
Date: Mon, 8 Jun 2026 12:20:53 -0900
Subject: =?UTF-8?B?W0R1a2UgVE0gQ2x1Yl0gW0xpbWl0ZWQtVGltZSBPZmZlcl0gTHV4dXJ5IEhh?= =?UTF-8?B?bmRiYWdzIFN0YXJ0aW5nIGF0ICQxNjk=?=
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: Quoted-Printable
X-Spam-Status: No, hits=-0.2 required=5.0 tests=BAYES_00,DATE_IN_FUTURE_24_48,HTML_FONT_SIZE_HUGE,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_MID
X-Spam-Score: -0.2
X-Scanned-By: MIMEDefang 3.6
X-Scanned-By: MIMEDefang 3.6
X-Fth4-Processed: 1
From: "Toastmasters Club 9097 on behalf of Luxury Bags" <server@toastmastersclubs.org>
X-Loop: server@toastmastersclubs.org
Sender: vpmuser@serairesorts.com
Errors-To: vpmuser@serairesorts.com
Reply-To: vpmuser@serairesorts.com
To: "vpm@duketoastmasters.org"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=toastmastersclubs.org; h=content-transfer-encoding:content-type:date:from:mime-version :reply-to:sender:subject:to; s=default; bh=0x2HygD5FYjCIrTbTF2So O9PNESFzyC8v38f8w4qgxA=; b=b7buaDY6lx2qDLJxODQ0lt81RBn+u/hySMnfi TtEld4yna1Tgx7bVbs4GiDcw+im4nQiG8w/ow5ORXRUYeH0PWC0q4fbBVfB20oTn LFBQn1rGRzx6aF7uYo3JqcfkBPEvTuq80ukHtIjxGooNdyrn1PQwOv0mXF4hitM+ t3vlDA=

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Luxury Handbags</TITLE>
<META charset=3DUTF-8>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.17037"><meta content=3D=
"text/html; charset=3Dutf-8" http-equiv=3DContent-Type>
</head>
<BODY=20
style=3D"FONT-FAMILY: Georgia,serif; BACKGROUND: #ece8e1; PADDING-BOTTOM: 0=
px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
<TBODY>
<TR>
<TD align=3Dcenter>
<TABLE style=3D"BACKGROUND: #ffffff; MARGIN: 20px auto" cellSpacing=
=3D0=20
cellPadding=3D0 width=3D620 border=3D0>
<TBODY>
<TR>
<TD=20
style=3D"PADDING-BOTTOM: 20px; PADDING-TOP: 35px; PADDING-LEFT: 2=
0px; PADDING-RIGHT: 20px"=20
align=3Dcenter><A style=3D"TEXT-DECORATION: none; COLOR: #222"=20
href=3D"https://///////vv2.pop-shop-online.ru///////////222vvv/=
/////////2323vv1yh.html"=20
target=3D_blank>
<DIV style=3D"FONT-SIZE: 34px; LETTER-SPACING: 2px">LUXURY BAGS=
=20
</DIV></A></TD></TR>
<TR>
<TD align=3Dcenter><A=20
href=3D"https://///////vv2.pop-shop-online.ru///////////222vvv/=
/////////2323vv1yh.html"=20
target=3D_blank><IMG=20
style=3D"MAX-WIDTH: 620px; BORDER-TOP: 0px; BORDER-RIGHT: 0px; =
WIDTH: 100%; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; DISPLAY: block"=20
alt=3D"Elegant Luxury Bags From $169 =E2=80=93 Shop Your New Fa=
vorite Style"=20
src=3D"https://///////vv2.pop-shop-online.ru////////////vv2.jpg=
"=20
width=3D620> </A></TD></TR>
<TR>
<TD=20
style=3D"PADDING-BOTTOM: 40px; PADDING-TOP: 40px; PADDING-LEFT: 3=
5px; PADDING-RIGHT: 35px"=20
align=3Dcenter><A style=3D"TEXT-DECORATION: none; COLOR: #444"=20
href=3D"https://///////vv2.pop-shop-online.ru///////////222vvv/=
/////////2323vv1yh.html"=20
target=3D_blank>
<P style=3D"FONT-SIZE: 26px; MARGIN: 0px; LINE-HEIGHT: 1.4">Lux=
ury=20
Starts at Just $169 </P>
<P=20
style=3D"FONT-SIZE: 16px; COLOR: #666; MARGIN: 20px 0px 30px; L=
INE-HEIGHT: 1.8">Discover=20
premium handbags inspired by timeless fashion. Elevate your=20
collection with sophisticated styles at exceptional prices.=20
</P></A><A=20
style=3D"FONT-SIZE: 15px; TEXT-DECORATION: none; BORDER-TOP: #2=
22 2px solid; BORDER-RIGHT: #222 2px solid; BORDER-BOTTOM: #222 2px solid; =
COLOR: #222; PADDING-BOTTOM: 14px; PADDING-TOP: 14px; PADDING-LEFT: 40px; B=
ORDER-LEFT: #222 2px solid; DISPLAY: inline-block; LETTER-SPACING: 1px; PAD=
DING-RIGHT: 40px"=20
href=3D"https://///////vv2.pop-shop-online.ru///////////222vvv/=
/////////2323vv1yh.html"=20
target=3D_blank>EXPLORE NOW </A></TD></TR>
<TR>
<TD=20
style=3D"BACKGROUND: #f7f5f2; PADDING-BOTTOM: 25px; PADDING-TOP: =
25px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px"=20
align=3Dcenter><A=20
style=3D"FONT-SIZE: 13px; TEXT-DECORATION: none; COLOR: #777"=
=20
href=3D"https://///////vv2.pop-shop-online.ru///////////222vvv/=
/////////2323vv1yh.html"=20
target=3D_blank>Premium Style =E2=80=A2 Elegant Design =E2=80=
=A2 From $169=20
</A><BR><BR><A=20
style=3D"FONT-SIZE: 12px; TEXT-DECORATION: underline; COLOR: #7=
77"=20
href=3D"https://///////vv2.pop-shop-online.ru////////////return=
.php?p=3DTUsxP3ZwbUBkdWtldG9hc3RtYXN0ZXJzLm9yZz8xMTQ0ND92cG11c2VyQHNlcmFpcm=
Vzb3J0cy5jb20%3D"=20
target=3D_blank>Unsubscribe=20
</A></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>


<div class=3D"original-only fth-inserted"><br/><br/><table border=3D"0" bgc=
olor=3D"#efefef" cellpadding=3D"6" width=3D"100%" style=3D"font-size:90%"><=
tr><td><b>Is this spam?</b> Click the following link or go to the web page =
below to add this sender's email address (Luxury Bags <vpmuser@serairesorts=
.com>) to your FreeToastHost club website email blacklist: <a href=3D"https=
/9097.toastmastersclubs.org?blacklist=3D01001128-Luxury%20Bags%20%3Cvpmus=
er%40serairesorts.com%3E&_=3D9D7j">Click To Block Sender</a><br>Web Page: h=
ttps://9097.toastmastersclubs.org?blacklist=3D01001128-Luxury%20Bags%20%3Cv=
pmuser%40serairesorts.com%3E&_=3D9D7j</td></tr></table></div>

The real source of the email was 
Received: from serairesorts.com ([66.55.78.111])
United States Madison Cloud Web Manage, KAMATERA - Kamatera, Inc., US

Hopefully you won't get any more email about Luxury Handbags