Edit File: 1752921460.M65244P1636090.eu.netkreatif.com,S=7938,W=8084
Return-Path: <kakoozafrank35@gmail.com> Delivered-To: coinhaber@eu.netkreatif.com Received: from eu.netkreatif.com by eu.netkreatif.com with LMTP id 6CdrAnR1e2j69hgA5yP9SQ (envelope-from <kakoozafrank35@gmail.com>) for <coinhaber@eu.netkreatif.com>; Sat, 19 Jul 2025 13:37:40 +0300 Return-path: <kakoozafrank35@gmail.com> Envelope-to: info@coinhaber.tr Delivery-date: Sat, 19 Jul 2025 13:37:40 +0300 Received: from mail-ua1-f44.google.com ([209.85.222.44]:50399) by eu.netkreatif.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <kakoozafrank35@gmail.com>) id 1ud4wX-006rIa-1h for info@coinhaber.tr; Sat, 19 Jul 2025 13:37:39 +0300 Received: by mail-ua1-f44.google.com with SMTP id a1e0cc1a2514c-87f30519147so1266104241.0 for <info@coinhaber.tr>; Sat, 19 Jul 2025 03:37:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1752921417; x=1753526217; darn=coinhaber.tr; h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=AjlidallQ5dXISTcc8aTdfJYDjiXPalyWD7ERSnjaoY=; b=nmNew71y1ZiT/HEjzLwcHSSkodHL5Xc11gdPpBb28Lx/o05ewAuW7qjm/BjHRcuitj 9KxS9vw2mtg+EtV4Sj7wfXEL2PpKOfJRnIB9sHQG3s5Z3Ow7Ye8Qi3g3HNs/f5z8C5FA ra3cZOXisJvvFTEhHFdq/KHH5rsjrr01JZjRWXVN0IcuORLhS/RyvOluNLyV6Ph2UGtL ASLB/UrFLtctJwpN8Hbe+3AVdCvt05bT8xQH2C4U9pntZ9OFoLJCObPq73WjLfJftHfX CNfWPUvyUetegjd3RMnkgkJ06vQ+UivMQF/q2yMAY8WFsJVDIo2WIPJgfEB53C4aYzAI nAeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752921417; x=1753526217; h=to:subject:message-id:date:from:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=AjlidallQ5dXISTcc8aTdfJYDjiXPalyWD7ERSnjaoY=; b=HFjIXTSnWlAVuXyUPvwj08Jdlkt1GfD9zMw/0H8iZkAGbh2RhrqiHRsIJvF+aDEJLJ UFA6XOeFudkqAdLGnSf3sZah6Qntx7yBSZHWSCR1s59MTiFiG2/ZPBuwZglmgT+4Jdy7 7UPwA9+Fwm2wG2RmoIwvzx1SmYrhaDVTyoKslaFBm1XUYQnGdsnMEIoDLwklVnIzXNYf IXoa+6VwTk9gVxB6Vfx/D4KvoaCzqHd9to73itrVej44TkAllzAPj1lxsYokdO/wcbAG vWdq4S03n5FhCmSpt6uqMXz8jLBmzarLPz2pBbp0wvJTXGtPBhCUfY04owzUujCLpp0X O5vw== X-Forwarded-Encrypted: i=1; AJvYcCUJDyLLt6FitvjJz5aiZFK6i4LLLea6Ek8Uqx7EnagGq96b6f1J9O3o7BntJz3tCmymkGEt@coinhaber.tr X-Gm-Message-State: AOJu0YxaECBIBAJlTncCDFe01s9XTVJx0KU8X/4A+dh51VBQ859ECQ1h YEuwzpiIGdHOVH/RVYNJl+RxzM7sxWoMrqC5/rf+J1Dx0J/WRB8xtd/TBlPxV4mh54kn4PU/abE uN5+GOwrW1uwG+z4ri6OMTSAfhVOuRdo= X-Gm-Gg: ASbGncs1lWYDmMholE/Atdk7EA7f5tghmKqPdiRn+RVWIHiDr8geOGL4QykmB/8cC3u 7rt2eGsl3SL8puwxXkBttI8ADv5TpLlqwOAmfhpHmN71IPmJYlbSnb+aAdd3jUUN1DvUDyo1njp VBUwuWGZr1KSgPMct8RzfJ+4kPBO0tpGkiO0T0Xj+1RJHR5uunrDfkYa84MosFnqQdplxDksZRj U22HWtwpZIgVUmwvkA5Gu8= X-Google-Smtp-Source: AGHT+IFO0uVmpj+4M50vLC8aK6sJBI0d4A2lJAgEnj0jblAGSxz1OJSEhqisrLRYmhltI5z2vz2MKIMqMOK9AnQpymc= X-Received: by 2002:a05:6102:dc9:b0:4e9:b8bf:1834 with SMTP id ada2fe7eead31-4f9ab36b571mr3182597137.15.1752921416380; Sat, 19 Jul 2025 03:36:56 -0700 (PDT) MIME-Version: 1.0 Reply-To: upsdlc1xr43@currently.com From: Usps <kakoozafrank35@gmail.com> Date: Sat, 19 Jul 2025 13:36:43 +0300 X-Gm-Features: Ac12FXwvSZJxsx5Ux7Blus580lKWuse6K0J-LUW87gjlPS-4dKC-vYithYGXmys Message-ID: <CAHNugwYDjHx3RDEZuDrFcXrcgq_9Gbw6ow1kZWVMw32MDfpm-g@mail.gmail.com> Subject: To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="00000000000057b62a063a45d275" Bcc: info@coinhaber.tr X-Spam-Status: No, score=2.9 X-Spam-Score: 29 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "eu.netkreatif.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: DEAR CUSTOMER, I AM (DOUG TULINO) POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPMENT TO YOUR AD [...] Content analysis details: (2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 KAM_BLANKSUBJECT Message has a blank Subject 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.222.44 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.222.44 listed in bl.score.senderscore.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [kakoozafrank35[at]gmail.com] 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [kakoozafrank35[at]gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs X-Spam-Flag: NO --00000000000057b62a063a45d275 Content-Type: text/plain; charset="UTF-8" DEAR CUSTOMER, I AM (DOUG TULINO) POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPMENT TO YOUR ADDRESS. IT MAYBE INTEREST YOU TO KNOW THAT A LETTERS ALSO ADDED TO YOUR PARCEL HOWEVER, WE CANNOT QUOTE THE CONTENT TO YOU VIA EMAIL FOR PRIVACY REASONS. WE UNDERSTAND THAT THE CONTENT OF YOUR PARCEL ITSELF IS ATM CARD WORTH $7,000,000.00 US DOLLARS URGENTLY CONTACT NOW WITH YOUR ADDRESS FULL NAME ON EMAIL BELOW (upsdlc1xr43@currently.com) YOURS FAITHFULLY, DOUG TULINO POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER. 475 L'ENFANT PLAZA SW ROOM 4012 WASHINGTON, DC 20260-2200 --00000000000057b62a063a45d275 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">DEAR CUSTOMER,<br><br>I AM (DOUG TULINO) POSTMASTER GENERA= L AND CHIEF EXECUTIVE OFFICER, WE HAVE BEEN WAITING FOR YOU TO CONTACT US F= OR YOUR PARCEL THAT HAS BEEN REGISTERED WITH US BY MR.KASH PATEL) FOR SHIPM= ENT TO YOUR ADDRESS. IT MAYBE INTEREST YOU TO KNOW THAT A LETTERS ALSO ADDE= D TO YOUR PARCEL<br><br>HOWEVER, WE CANNOT QUOTE THE CONTENT TO YOU VIA EMA= IL FOR PRIVACY REASONS. WE UNDERSTAND THAT THE CONTENT OF YOUR PARCEL ITSEL= F IS ATM CARD WORTH $7,000,000.00 US DOLLARS URGENTLY CONTACT NOW WITH YOUR= ADDRESS FULL NAME ON EMAIL BELOW (<a href=3D"mailto:upsdlc1xr43@currently.= com">upsdlc1xr43@currently.com</a>)<br><br>YOURS FAITHFULLY,<br>DOUG TULINO= <br>POSTMASTER GENERAL AND CHIEF EXECUTIVE OFFICER. <br>475 L'ENFANT PL= AZA SW ROOM 4012 WASHINGTON, DC 20260-2200</div> --00000000000057b62a063a45d275--