Edit File: 1750433121.M577700P1175334.eu.netkreatif.com,S=9190,W=9360
Return-Path: <abubakarsaadatu610@gmail.com> Delivered-To: coinhaber+spam@eu.netkreatif.com Received: from eu.netkreatif.com by eu.netkreatif.com with LMTP id cIv3IGF9VWgm7xEA5yP9SQ (envelope-from <abubakarsaadatu610@gmail.com>) for <coinhaber+spam@eu.netkreatif.com>; Fri, 20 Jun 2025 18:25:21 +0300 Return-path: <abubakarsaadatu610@gmail.com> Envelope-to: info@coinhaber.tr Delivery-date: Fri, 20 Jun 2025 18:25:21 +0300 Received: from mail-ej1-f48.google.com ([209.85.218.48]:53702) by eu.netkreatif.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <abubakarsaadatu610@gmail.com>) id 1uSdc6-004xmQ-0t for info@coinhaber.tr; Fri, 20 Jun 2025 18:25:21 +0300 Received: by mail-ej1-f48.google.com with SMTP id a640c23a62f3a-adb5cb6d8f1so310234966b.3 for <info@coinhaber.tr>; Fri, 20 Jun 2025 08:25:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1750433079; x=1751037879; darn=coinhaber.tr; h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=7Tm45LJ7NkJlATir/VLHad84K3MbCgzVKz5/hZ5GbDc=; b=aJ16bsa+r2L+Ip1wTCJj2puCRmOlK2xxNBceV46Njmcw46REJbLIGUZjDBIfCqOP4m FcoRaYG9jiUsdrtgw0xaSklT/F0YbKoGYq691QwiN+pkYko6dGsOtZYuPglvG1hnlIfz o8jMHPfB/JicHOvbk6Bu0osL/7cNMJn2GTcuMzkhj4l4/rwf79Nd4yvXBV7aZCujJbKc vunZtSzidr75y0s5UaaPPxlNfk9N8qqVyM8np+ICX8h1os/Jhd2CiBbU/gM1X+4Ogrd+ KipBtokkq9zypq0u09YVn3lT37L+S+enXt0+//hafaN6DMMK6MbeC7eWIDygwrW3hKMe Wk4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750433079; x=1751037879; h=to:subject:message-id:date:from:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=7Tm45LJ7NkJlATir/VLHad84K3MbCgzVKz5/hZ5GbDc=; b=fERdj72dVFwAg9FtunRHWs7R3tM612tY2EaV41qSRKzQNhjxfZFjozzvOMbArTWHe9 Qo6mB6W3bI5cvGJUc0p9yxobkpooUz7R9pSJ6fRFmdZRY7Cf0t2SvAeS/RARqYL7P5qV S4RSk/2oqWENXBrLjF8NSoL21Q6tQe7NRucpKlfxPzjj6dK0cb7eqF0PaHaYsSFVatmr XEXZIvpfhcZd/xsyIZnERnzfE9BGrw+epoktlueszOxCgndtV/DyyCoodcwN+Jv5ZA8y stHazekaufpb5FZzgyvduFGWo+MAKsVlv6PzXX1yqCsoYbveKcMeJyYSxCiP2+oYAiIy F4AQ== X-Forwarded-Encrypted: i=1; AJvYcCW2XAzfnyrUfyIOBC160388MJmTkerZGRFhQQ71dLUO4/cXOgWzisAnl406eNFI05nNbluR@coinhaber.tr X-Gm-Message-State: AOJu0YwhsD2769aqHdChva7gxnWkZXFdiuk+jv9PDuQVetM2Ojov0l6g Jvwvuyo4x8gN1ji1m9FQ/XE3Mw3cHs6SyZC6L7zBQYIIKCiELWLsaEbdh5P7XrfMpQtcSCnBGIH 83H8SPvlBsiJ0+qWyO4dhkOErn0VDLyQ= X-Gm-Gg: ASbGnct4rhweNjmqtP7REVOhOYbUn/Anh+XVTNFtd+Yul5n8ja0VMtp73Hq1vtLD2X8 5eQ9DRDHkGSG2td1pnKkOU1vxnaxABs8SfS2jVXoAarV+LU9jlraE3Rc56Jigxwgpl8Dxada3vK gmIQyUfINvu8ZMvzuhgbip8iey6wY4k/wlyUlyMKD8lIw4 X-Google-Smtp-Source: AGHT+IGBhlSPFeGk6hvZ6c3T38qqx9TCglVyYLhdnD3N2c4BPFMxWagwdeFluDu20OpCnK73Uc2S/21T1WWPohS2l9k= X-Received: by 2002:a17:907:26c3:b0:ad2:425c:27ce with SMTP id a640c23a62f3a-ae0579291e6mr290954766b.2.1750433078138; Fri, 20 Jun 2025 08:24:38 -0700 (PDT) MIME-Version: 1.0 Reply-To: ggifud1587@att.net From: Uba Group <abubakarsaadatu610@gmail.com> Date: Fri, 20 Jun 2025 18:24:26 +0300 X-Gm-Features: Ac12FXwQjCYjxsVTU2RqzRQdSCbwBdw-kGeUojBEZVUgenkQD53IQmyJ4etjzS4 Message-ID: <CAMtyVBOG6czfS6BUMgugJNrAwJ83q5N12zMER+BBOKqJ0xH1OQ@mail.gmail.com> To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="000000000000d35dac06380275b9" Bcc: info@coinhaber.tr X-Spam-Status: Yes, score=15.5 X-Spam-Score: 155 X-Spam-Bar: +++++++++++++++ X-Spam-Report: Spam detection software, running on the system "eu.netkreatif.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: ATTN:DEAR YOUR US$8M FUND TRANSFER VIA BITCOIN PAYMENT ACCORDING TO THE APPROVAL ORDER TO RELEASE AN OUTSTANDING FUND TO YOU FROM THE IMF RESETTLEMENT ACCOUNT WITH THIS INSTITUTION HSBC BANK LONDON FOR TRANSPAR [...] Content analysis details: (15.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 KAM_BLANKSUBJECT Message has a blank Subject 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.218.48 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.218.48 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [ggifud1587[at]att.net] 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [abubakarsaadatu610[at]gmail.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [abubakarsaadatu610[at]gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 6.0 KAM_BENEFICIARYLOW Beneficiary scams (Lower Confidence) 2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs X-Spam-Flag: YES Subject: ***SPAM*** --000000000000d35dac06380275b9 Content-Type: text/plain; charset="UTF-8" ATTN:DEAR YOUR US$8M FUND TRANSFER VIA BITCOIN PAYMENT ACCORDING TO THE APPROVAL ORDER TO RELEASE AN OUTSTANDING FUND TO YOU FROM THE IMF RESETTLEMENT ACCOUNT WITH THIS INSTITUTION HSBC BANK LONDON FOR TRANSPARENCY AND ACCURATE RECORD. WE DEEM IT NECESSARY TO LET YOU KNOW THAT WE ARE TO START MOVING YOUR FUNDS IN BITS INTO BITCOIN WALLET ACCOUNT AND YOU ARE ADVISED TO OPEN BITCOIN ACCOUNT IF YOU DO NOT HAVE ONE AND FORWARD THE DETAILS WITH A COPY OF YOUR IDENTIFICATION AND TELEPHONE NUMBER TO ENABLE US START PAYING YOUR FUNDS TILL THE ENTIRE US$8,000,000.00 EIGHT MILLION UNITED STATES DOLLARS WILL BE PAID BUT NOT AT ONCE BUT IN BITS OF US$1,000,000.00 ON EACH TRANSACTION. THIS IS THE ONLY EASY WAY OUT TO AVOID INTERNATIONAL PAYMENT REQUIREMENTS AS THIS IS PAYMENTS MADE EASY. WE LOOK FORWARD TO YOUR COMPLIANCE THANKS FOR YOUR PATIENCE AND TIME REGARDS, MR.TONY ELUMELU CHAIRMAN UNITED BANK FOR AFRICA PLC uba.bank.group1900@gmail.com --000000000000d35dac06380275b9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">ATTN:DEAR<br><br>YOUR US$8M FUND TRANSFER VIA BITCOIN PAYM= ENT ACCORDING TO THE APPROVAL ORDER TO RELEASE AN OUTSTANDING FUND TO YOU F= ROM THE IMF RESETTLEMENT ACCOUNT WITH THIS INSTITUTION HSBC BANK LONDON FOR= TRANSPARENCY AND ACCURATE RECORD.<br><br>WE DEEM IT NECESSARY TO LET YOU K= NOW THAT WE ARE TO START MOVING YOUR FUNDS IN BITS INTO BITCOIN WALLET ACCO= UNT AND YOU ARE ADVISED TO OPEN BITCOIN ACCOUNT IF YOU DO NOT HAVE ONE AND = FORWARD THE DETAILS WITH A COPY OF YOUR IDENTIFICATION AND TELEPHONE NUMBER= TO ENABLE US START PAYING YOUR FUNDS TILL THE ENTIRE US$8,000,000.00 EIGHT= MILLION UNITED STATES DOLLARS WILL BE PAID BUT NOT AT ONCE BUT IN BITS OF = US$1,000,000.00 ON EACH TRANSACTION.<br><br>THIS IS THE ONLY EASY WAY OUT T= O AVOID INTERNATIONAL PAYMENT REQUIREMENTS AS THIS IS PAYMENTS MADE EASY.<b= r><br>WE LOOK FORWARD TO YOUR COMPLIANCE<br><br>THANKS FOR YOUR PATIENCE AN= D TIME<br><br>REGARDS,<br>MR.TONY ELUMELU<br>CHAIRMAN UNITED BANK FOR AFRIC= A PLC<br><a href=3D"mailto:uba.bank.group1900@gmail.com">uba.bank.group1900= @gmail.com</a></div> --000000000000d35dac06380275b9--