Edit File: 1746805052.M287431P526346.eu.netkreatif.com,S=8377,W=8531
Return-Path: <gssempijja123@gmail.com> Delivered-To: coinhaber+spam@eu.netkreatif.com Received: from eu.netkreatif.com by eu.netkreatif.com with LMTP id sLzdDzwhHmgKCAgA5yP9SQ (envelope-from <gssempijja123@gmail.com>) for <coinhaber+spam@eu.netkreatif.com>; Fri, 09 May 2025 18:37:32 +0300 Return-path: <gssempijja123@gmail.com> Envelope-to: info@coinhaber.tr Delivery-date: Fri, 09 May 2025 18:37:32 +0300 Received: from mail-oa1-f46.google.com ([209.85.160.46]:47395) by eu.netkreatif.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <gssempijja123@gmail.com>) id 1uDPmq-002D0e-0t for info@coinhaber.tr; Fri, 09 May 2025 18:37:32 +0300 Received: by mail-oa1-f46.google.com with SMTP id 586e51a60fabf-2d071fcd89bso921622fac.3 for <info@coinhaber.tr>; Fri, 09 May 2025 08:37:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1746805009; x=1747409809; darn=coinhaber.tr; h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=Ip+5SHJBp7H3qEZrGjSVYWSj5ZqaLu80obFfiX2JxVY=; b=W8cW3Bcii5BtFbGcgOEp1Ezm/a4fAA/2kcJ18Fu6CxvQctsjEw/tT9YP3KFBHLoLSn XF34OWhxfTFpENZcvwIuXItZrOCqIvW+ys54rTBWB0s6C6RI9Z/NbqcIu2XaEm48nd+7 t3qnaqnbBJIXbnLecvnYPkOfNSgFX6fHy627+pozC1ZVW2lWYbXYblG802t4Igeuz3M7 BXI2MapN/30tRxD5Moo1PKVi/EACrkTl6EWVK7edxpXmbZoVunkYa+3UlYQgQGRLsPpY TYemM70z/dNeF7L2FzJqrrzQuzoQ4NcTFzdueNwr/QAib+meylfWi+Cg8oC5Pippf4XH pLhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746805009; x=1747409809; h=to:subject:message-id:date:from:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Ip+5SHJBp7H3qEZrGjSVYWSj5ZqaLu80obFfiX2JxVY=; b=kD1LIgo7Fec2fD6r39bhweu+I4LfXVlFOufWCwQWPOnzC+2YgSn6kcYW1rnbkZxGJC 1XmBW9Moq/h2fiBHBEGrNtStiBPpakj9o+CaK0h6j8U/nDHdgSPMOD5UM75Tpzeo9ey7 OsL/IDZiVmmD4RvTmaiUnel3/NaRMmXstIIm0K30CQPh7HfuqspV0COxByshpBeso5Tx 9n+/k+4JMBdc0/JDgw4SLHfk2RYPhYV5aTdZ+sLMUDDU2hkvmP283BGLZjKGngwKWgvM g9BeU75iQskiMEECazqua5LS3zSGUij/qOspExes9/JR6B4BjNpc5nSqsPWaUebe/eEQ ftyA== X-Forwarded-Encrypted: i=1; AJvYcCV5gnpoE2iYo+LGQPZFZq5F6cFmfMKF6SiqVOumNNDPqSGqCzIVMhyBAh01q7+UMdsZ40yG@coinhaber.tr X-Gm-Message-State: AOJu0YzvpxATeMzMr28xtfw3dYroiarHb2FH38L0wHXCI6wpC7961jFH cfzEAIxTMAR3J6DAIu4A7V5KK8H3vgePTQJ1Q/7bqXJM7fqHwkQfU3b9xIseR601aTrh70Lqn9u QfgdeuP7IdC6WxtFikVzrpROfAbs= X-Gm-Gg: ASbGncsTtT9ULxvWw+YrxAvU14R5T9d/9/Wh4nHQT9iq1HyLrzrLZyQ8Rb69Vf6Gt9p T/OyxZ9X75/2uWlfX5eFaGWrcRgG22KmKmBWPEJqBB4kqk/vUDMEl+Jde4c+7KW+Bb8+GREVomT I2w/dNvOUfO+Kf09j3P0UBm/I= X-Google-Smtp-Source: AGHT+IGd+nBOErp4NdVhmS08twqMMxQhZylzgKTlJfLYuMexDiOEKhtkko6yWQULcOx6CX2dmCk6PkTaewhpXPMKkfo= X-Received: by 2002:a05:6871:28c:b0:2d6:b7b:a83 with SMTP id 586e51a60fabf-2dba42ae727mr2388926fac.13.1746805009225; Fri, 09 May 2025 08:36:49 -0700 (PDT) MIME-Version: 1.0 Reply-To: usps436@gmail.com From: Ups <gssempijja123@gmail.com> Date: Fri, 9 May 2025 16:36:26 -0700 X-Gm-Features: ATxdqUGNjVbu-NdxZn5AK2kFgnQp_kpT1SWS6Dft4FhMA5SwB6biT08-VLMIdis Message-ID: <CA+y7x=b9SYZ=75qQ3sy34tu16FCq3akVagCd3QY6_SZ5Yzjk9A@mail.gmail.com> To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="000000000000111dc60634b5bcf2" Bcc: info@coinhaber.tr X-Spam-Status: Yes, score=8.0 X-Spam-Score: 80 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "eu.netkreatif.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: DEAR CUSTOMER, I AM (DOUG TULINO) POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPMENT TO YOUR AD [...] Content analysis details: (8.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 KAM_BLANKSUBJECT Message has a blank Subject 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.160.46 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.160.46 listed in bl.score.senderscore.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [gssempijja123[at]gmail.com] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [usps436[at]gmail.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [gssempijja123[at]gmail.com] 0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to 1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs X-Spam-Flag: YES Subject: ***SPAM*** --000000000000111dc60634b5bcf2 Content-Type: text/plain; charset="UTF-8" DEAR CUSTOMER, I AM (DOUG TULINO) POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPMENT TO YOUR ADDRESS. IT MAYBE INTEREST YOU TO KNOW THAT A LETTERS ALSO ADDED TO YOUR PARCEL HOWEVER, WE CANNOT QUOTE THE CONTENT TO YOU VIA EMAIL FOR PRIVACY REASONS. WE UNDERSTAND THAT THE CONTENT OF YOUR PARCEL ITSELF IS ATM CARD WORTH $7,000,000.00 US DOLLARS URGENTLY CONTACT NOW WITH YOUR ADDRESS FULL NAME ON EMAIL BELOW (usps436@gmail.com) YOURS FAITHFULLY, DOUG TULINO POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER. 475 L'ENFANT PLAZA SW ROOM 4012 WASHINGTON, DC 20260-2200 --000000000000111dc60634b5bcf2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">DEAR CUSTOMER,<br><br>I AM (DOUG TULINO) POSTMASTER GENERA= L AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US F= OR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPM= ENT TO YOUR ADDRESS. IT MAYBE INTEREST YOU TO KNOW THAT A LETTERS ALSO ADDE= D TO YOUR PARCEL<br><br>HOWEVER, WE CANNOT QUOTE THE CONTENT TO YOU VIA EMA= IL FOR PRIVACY REASONS. WE UNDERSTAND THAT THE CONTENT OF YOUR PARCEL ITSEL= F IS ATM CARD WORTH $7,000,000.00 US DOLLARS URGENTLY CONTACT NOW WITH YOUR= ADDRESS FULL NAME ON EMAIL BELOW (<a href=3D"mailto:usps436@gmail.com">usp= s436@gmail.com</a>)<br><br>YOURS FAITHFULLY,<br>DOUG TULINO<br>POSTMASTER G= ENERAL AND CHIEF EXECUTIVE OFFICER. <br>475 L'ENFANT PLAZA SW ROOM 4012= WASHINGTON, DC 20260-2200<br></div> --000000000000111dc60634b5bcf2--