Bitcoin phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Aug 2023 07:38:52 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qYR7Y-0005ch-2h

for dave@doctor.nl2k.ab.ca;

Tue, 22 Aug 2023 07:08:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Aug 2023 07:08:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwrnbx.outbound-mail.sendgrid.net ([167.89.82.186]:51764)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qYOmr-000Fb9-0s

for root@nk.ca;

Tue, 22 Aug 2023 04:39:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;

h=content-type:from:mime-version:subject:reply-to:to:list-unsubscribe:

cc:content-type:from:subject:to;

s=smtpapi; bh=2yeEzO2TPW0SQO7SEmVa6btejMOy79XKpMzm7Gl5Wqk=;

b=Yiyl2EcAbNxaQw8cphtWpHlP2bwSoejkI3oWZ2+exXAdQ1WJK09NaInUeSYLO4c+PAIj

B29kWaHpbwdxKC3GVoMoTi5VLWpgdYzYtTb4qf1RB9NnAUfUsWOdp7CqBfl3i6ePrqrLYV

6NOtH2nlM7RIB4oJFA4D8pYrB4mCMRx0c=

Received: by filterdrecv-6bbb5c74f4-xnkd6 with SMTP id filterdrecv-6bbb5c74f4-xnkd6-1-64E481A5-3F

2023-08-22 09:36:37.539936277 +0000 UTC m=+8935009.796449955

Received: from MTU2NTIzMTQ (unknown)

by geopod-ismtpd-1 (SG) with HTTP

id jwFDhROUTrW9kw1JhqmDSA

Tue, 22 Aug 2023 09:36:37.528 +0000 (UTC)

Content-Type: multipart/alternative; boundary=337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Date: Tue, 22 Aug 2023 09:36:39 +0000 (UTC)

From: "Blockchain.com"

Mime-Version: 1.0

Message-ID:

Subject: Withdrawal of 2,852867 BTC

Reply-To: cgemubpozdrj@gmail.com

X-SG-EID:

=?us-ascii?Q?l2lUnE35BbCanAV43ffSgLQHF63If8ul4VEqunGo3b+E1ZcGZ+3n6K0wOP02En?=

=?us-ascii?Q?pPJ669Nf1Fb6SISjbAgf=2FztKn075bPJxSJwx7jU?=

=?us-ascii?Q?S6KyojOxazJKJkeoqasJ3HJEYZlU7Nmo71eJkBR?=

=?us-ascii?Q?N4D3pIidC2pc0PcWFxn2fCzr3ZCQsnF0MCRDpF=2F?=

=?us-ascii?Q?jTskyOLPaFx6FNyYzw9GzmtPhd75GiwD45prGc2?=

=?us-ascii?Q?NEMAaEnnIJgfIkLq9P67ZyCkXhDbALiD9+7MvF?=

X-SG-ID:

=?us-ascii?Q?se=2F49CGmbS0sfR97ImeXvDoOrI1ra2UfBi=2FYp+tM4sZlJ2PdK+SetPMIv+rKLE?=

=?us-ascii?Q?zD+O8kuKHowtD22JNgMgVQg978i=2FSIh61XQxwrq?=

=?us-ascii?Q?3IqaGxIySh155eqFKUPgmAPXfuiOi7NXQhaVfZE?=

=?us-ascii?Q?erMdGutPbebhtz3kogfpDtROd4h=2Fai+ZsTTXSSS?=

=?us-ascii?Q?zfTwWd7a1lUEV8f9X1FtjY0paLbJPyJjx6d83M=2F?=

=?us-ascii?Q?wB8SUj5sqQ0v8PMcKojRYXZAWsrHy07bvw0F2gO?=

=?us-ascii?Q?kfBZrxfcVCkCyGjm+fg4KWuwlDCGBpKAkceocIu?=

=?us-ascii?Q?fIx7eekqFuJvrGfdKwoIluLiFrbHFsfmBojt=2FUh?=

=?us-ascii?Q?WyNwN138J7dEHRMWU9Jm6yCaDSAAPfrIx=2F9Mbmj?=

=?us-ascii?Q?rGQ6IyjaU2PEyUWAu63uK59pEmQkICGDwk=2Fmh4s?=

=?us-ascii?Q?gL7QgcOe9aFeuGOStWBvHJP6FNlyOZ19ahGRpwx?=

=?us-ascii?Q?0ubWaqLltBOT4N5UQYtoE3bOe1hP0fXRDeYEfpz?=

=?us-ascii?Q?j0cLFSs+Lb=2FuGsRcSbH8uLrUB4PYpw2BKCSV2d1?=

=?us-ascii?Q?8T7ygY9cPoVh+x1IhHuCiP+D1ugpD8rRmqqr+2S?=

=?us-ascii?Q?CK=2FErHe19OV9TPa0WiwdaK8KsYLDyJUqmHhnYP4?=

=?us-ascii?Q?6gR8NM1OZ=2FPAUQFKL8UWbKUiGGxTLAPRSPf+Rn7?=

=?us-ascii?Q?1w1a3eX5BnobsNV8SSbrqh=2FlwGIFgpqYHa6o=3D?=

To: root@nk.ca

X-Entity-ID: gHKsJ4P0JCXoSG6kKukFBg==

List-Unsubscribe:

=?us-ascii?Q?=3Cmailto=3Aunsubscribe=40sendgrid=2Enet=3Fsubject=3Dhttps=3A=2F=2Fu15652314=2Ect=2E?=

=?us-ascii?Q?sendgrid=2Enet=2Fwf=2Funsubscribe*q*upn=3DOuJN8?=

=?us-ascii?Q?171zez-2FuHmFragh7DgGw3HN2V5-2BqVUueH90?=

=?us-ascii?Q?NeGLJZV4uw9si3VcZkO1CFkOrLVFxE8RT9kvWcN?=

=?us-ascii?Q?o2hPHXygrBGBScN1qGlwQiEEDAE6t8Lq-2B8jXC?=

=?us-ascii?Q?TWMFOIqDnKkCoK0oewGpXQEqhXJLEJUZikMKE7R?=

=?us-ascii?Q?B-2FQa2gslLVUY5LIANjpbqbNPKAm9QSWH7kJOU?=

=?us-ascii?Q?LyBq9mvnwc2wp-2FY7uz50JdlamNUV2USbVCzur?=

=?us-ascii?Q?fFPN3jSA-2BQcepSmCiwPX3bR4JzwSOLxZvpZ4y?=

=?us-ascii?Q?6vfpYsJP80DqP682wdnAe8NypRjWPXGRa8-2FW3?=

=?us-ascii?Q?N-2FpJ3VND0I7HTGa0qMIbSvo3PGIaSQCJgV9Wf?=

=?us-ascii?Q?S6mvDzlzYAxlPtle7aCbVdO4nbyxElgQGy-2Fnj?=

=?us-ascii?Q?SE89Wa7C0GvEjfsyE-2BoLCOPuQZfTJ9kKXbmTR?=

=?us-ascii?Q?bSDjMrEW89VCld7fq9VLZxjjrLViJDTURBv5Ha3?=

=?us-ascii?Q?GbsIfhsBhOGvI5edAocRTM7xpJprEjF6HElbCZZ?=

=?us-ascii?Q?wspD-2F5-2FYq-2BmpMsw-2F1SWAyon65GyIgrQ?=

=?us-ascii?Q?tx4goWVA7N8Hssf5QNwHHArtToffMK46Q-2B8bM?=

=?us-ascii?Q?mTN8J3-2FrVSf9bN1NOfwjwGu5C6mVViLz81UBG?=

=?us-ascii?Q?b7NweNY65Erhr6WvlBWwXMcMjmTEMWEEwTGQSdl?=

=?us-ascii?Q?0FbHqzKaV3B8ciEFCZWOnGR4UJWho4gZVyIuBgM?=

=?us-ascii?Q?0aDFp5mSorGO1THLkwMshHOIxIDhHK-2FOZdxCV?=

=?us-ascii?Q?qZnSN9hTQfMX-2FdQNCF6Bgtc94lcbj0wLKoYNU?=

=?us-ascii?Q?s3s-2Ftin6ewSIbxQ9Z1IrHvJDkZIRpdSNPGoyE?=

=?us-ascii?Q?AEWQQqbbaxpK7O9tlaD6LrWpdjl3bVaLR-2F943?=

=?us-ascii?Q?NV-2BmkXuVUnj32O7t8Wdu-2FcU34lAm75nJK6E?=

=?us-ascii?Q?t7st1d4QWgkuJ2UXY-3D=3E?=



--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0



( https://www.blockchain.com )

Blockchain.com



**************************************

Indemnification for Losses Due to Fraud

**************************************



Hi there,



We inform you that we have an opportunity to return cryptocurrency from a w=

allet opened in your name by a fraudulent company. Activity of this company=

was blocked by financial authority, and we got permission to issue BTC to =

the end user, i.e. you.



The transfer in the amount of 2,152867 BTC is ready to be sent to you. Pl=

ease send your bank account details to your manager to prepare the transfer=

.



Contact our manager for more information by clicking the button below or th=

e image above.



Get your BTC back ( https://cutt.ly/Pwtjd9Kj )



Blockchain's Risk and Fraud Department

WhatsApp: +44 7360 473131



=A9 2023 Blockchain.com Group Holdings, Inc.

--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Mime-Version: 1.0











Indemnification for Losses Due to Fraud - Blockchain.com


































5AE9UoPy8aG1kc9mZ20FwYwnFWXQIhYGwhaf1U6toIhhwpYg64pzmoa7RxEk0vr5AjQ_au8KhoA=

RU0pHZsVFxriXkF6l9oE4ctpp8oWSMTSeFYVanl2MkPXfW2u8dRghUJdMQ197H9Q99UjFoS7EA9=

FzwNoQczZHR1RcCBXFhnVOq69bv72URnkAOjdiP3WAvbTMNkr2GGnFOcpu-2F9F-2Fq2RnFkiMK=

NQM3BjOJNbumxzhrifbfi7vozeD9V-2BykJUsQeIXd29K6lkmVYRKbPv2u8iCnAApTuFMlrQrji=

fu00GO0f4yOpVUdwdnh5xssojDyrLBgC-2FYqRjeGPcwOQbgyQ05Wz6bUbsK1pBL6f-2F0Btn9q=

1kjGKtwOlJ-2Ff1-2BZzYtPHx51Jp9IT-2B9iZg8Ebrud0kGZT85DI98-2FLnMNa-2BFR8YwnI2=

Cem2h4Ehmzg8ejPQCY3nVtktLjeCcwUk2dKHJ4PFMAXKv7fhrt3TuZwfRTI9r6nJl6VZnMpDbkY=

Pp5N2pX3gftRscGgOJLK98IcE5U6jEmFItAYhBdKXfkXvSsoHJLZUtz8BJiDIq9VtVQqdQRgBUQ=

jydpu1H73ivKIFg9vBIbi0grbD4CSat8EwQO6uHixkNoCHUQvOIU8gnNxgn-2FXPQWs4OCdTNj0=

S-2BbBqAEzEACFuxdOQ6lldsgasic9LMKPoPJpspKIh87sJRLvqAvR7mDF3k-2FIQ4sgtqqdMRk=

vhhOW-2BCbjPGH1dqrQ1FYOrLH9kovChWtk1QxBY5relmJ4Rs0q6Pw-2BpM8Gs3DtuWR8YBbbBW=

6zmALnINg1meQzlhx206cNxC0DGerdKU08Qia26mXo2JhUDk1IsqYqnht27wkJzo7DoYJSSc8Pt=

x6JxlsA20-2BezrRUhIK-2FIJfuOm9sx7MKHR9MpVPmf2hggmgbu3YvA-3D-3D" target=3D"_=

blank">

3D"Blockchain.com
sercontent.com/proxy/pQVHDoaKah-zoX7ABVARyvjrQtZl0V7ns04dYFl8HZ1sqh_vKtOX0G=

H1oY3mBZFSXuCZnF15Phs9Ah7tBFmh3jdpVVH0VIYRJZeQlbS_I3cbZnxkAJQendQIbQV5lkTns=

VvkEbW_ST8aTiEoj5I=3Ds0-d-e1-ft#https://theme.zdassets.com/theme_assets/224=

702/4a992904eec25c88dcddda283baecfb5968c30c6.png"

width=3D"32" height=3D"32" style=3D"border: 0; border-rad=

ius: 3px; display: block;">



Blockchain
nt">.com










Indemnification for Losses Due to Fraud



Hi there,



We inform you that we have an opportunity to return cryptocurren=

cy from a wallet opened in your name by a fraudulent company. Activity of t=

his company was blocked by financial authority, and we got permission to is=

sue BTC to the end user, i.e. you.



The transfer in the amount of 2,152867 BTC is ready to be=

sent to you. Please send your bank account details to your manager to prep=

are the transfer.



Contact our manager for more information by clicking the =

button below or the image above.












x; background-color: #0c6cf2;">


5AE9UoPy8aG1kc9mZ20F1gfQGNTESv-2FClbMpFnzzggbZFq913nLcUTjhNQAYZ5joOVJ_au8Kh=

oARU0pHZsVFxriXkF6l9oE4ctpp8oWSMTSeFYVanl2MkPXfW2u8dRghUJdMQ197H9Q99UjFoS7E=

A9FzwNoQczZHR1RcCBXFhnVOq69bv72URnkAOjdiP3WAvbTMNkr2GGnFOcpu-2F9F-2Fq2RnFki=

MKNQM3BjOJNbumxzhrifbfi7vozeD9V-2BykJUsQeIXd29K6lkmVYRKbPv2u8iCnAApTuFMlrQr=

jifu00GO0f4yOpVUdwdnh5xssojDyrLBgC-2FYqRjeGPcwOQbgyQ05Wz6bUbsK1pBL6f-2F0Btn=

9q1kjGKtwOlJ-2Ff1-2BZzYtPHx51Jp9IT-2B9iZg8Ebrud0kGZT85DI98-2FLnMNa-2BFR8Ywn=

I2Cem2h4Ehmzg8ejPQCY3nVtktLjeCcwUk2dKHJ4PFMAXKv7fhrt3TuZwfRTI9r6nJl6VZnMpDb=

kYPp5N2pX3gftRscGgOJLK98IcE5U6jEmFItAYhBdKXfkXvSsoHJLZUtz8BJiDIq9VtVQqdQRgB=

UQjydpu1H73ivKIFg9vBIbi0grbD4CSat8EwQO6uHixkNoCHUQvOIU8gnNxgn-2FXPQWs4OCdTN=

j0S-2BbBqAEzEACFuxdOQ6lldsgasic9LMKPoPJpspKIh87sJRLvqAvR7mDF3k-2FIQ4sgtqqdM=

RkvhhOW-2BCbjPGH1dqrQ1FYOrLH9kovChWtk1QxBY5relmJ4Rs0-2Bu2e3vo0v29FvScAwbqwj=

ZodTm0UeJzvT0qzWNx0piQVlbf9KsQLFQpip2M-2BOIugyNJrRYuhuF3fNUarIp-2BL0pVTevU5=

PCgeDJbqtwz-2BXc4LlHjrIipg-2BzAQWccGCmyjBwhAvTBw284bPRbYCQ4lMQ-3D-3D" style=

=3D"font-size: 16px; font-style: normal; font-weight: 600; line-height: 24p=

x; text-decoration: none; background-color: #0c6cf2; border: 1px solid #0c6=

cf2; border-radius: 10px; padding: 12px 60px; display: inline-block; color:=

#ffffff!important"

target=3D"_blank">Get your BTC back


Blockchain's Risk and Fraud Department


WhatsApp: +44 7360 473131











=A9 2023 Blockchain.com Group Holdings, Inc.












HmFragh7DgGw3HN2V5-2BqVUueH90NeGLJZV4uw9si3VcZkO1CFkOrLVFxE8RT9kvWcNo2hPHXy=

grBGBScN1qGlwQiEEDAE6t8Lq-2B8jXCTWMFOIqDnKkCoK0oewGpXQEqhXJLEJUZikMKE7RB-2F=

Qa2gslLVUY5LIANjpbqbNPKAm9QSWH7kJOULyBq9mvnwc2wp-2FY7uz50JdlamNUV2USbVCzurf=

FPN3jSA-2BQcepSmCiwPX3bR4JzwSOLxZvpZ4y6vfpYsJP80DqP682wdnAe8NypRjWPXGRa8-2F=

W3N-2FpJ3VND0I7HTGa0qMIbSvo3PGIaSQCJgV9WfS6mvDzlzYAxlPtle7aCbVdO4nbyxElgQGy=

-2FnjSE89Wa7C0GvEjfsyE-2BoLCOPuQZfTJ9kKXbmTRbSDjMrEW89VCld7fq9VLZxjjrLViJDT=

URBv5Ha3GbsIfhsBhOGvI5edAocRTM7xpJprEjF6HElbCZZwspD-2F5-2FYq-2BmpMsw-2F1SWA=

yon65GyIgrQtx4goWVA7N8Hssf5QNwHHArtToffMK46Q-2B8bMmTN8J3-2FrVSf9bN1NOfwjwGu=

5C6mVViLz81UBGb7NweNY65Erhr6WvlBWwXMcMjmTEMWEEwTGQSdl0FbHqzKaV3B8ciEFCZWOnG=

R4UJWho4gZVyIuBgM0aDFp5mSorGO1THLkwMshHOIxIDhHQqXjTGMoGX7EA-2Fz-2FOOkIcMrcs=

X87ZL0ycd-2FkShZg3E9XXIJgJ-2FKRUKK4eYGhnBbqmPrw0hNBejcY6MTTUg2HUos8W1DXc2Uu=

TQPe31Zy-2FBJNcwnAxP1LkCrQnkfqtSGJ8zwgTz-2Fw2rsd7bFjlG4EeyK9qIq3rPclev-2Bmt=

lXx3bQ-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1=

px !important;width:1px !important;border-width:0 !important;margin-top:0 !=

important;margin-bottom:0 !important;margin-right:0 !important;margin-left:=

0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-r=

ight:0 !important;padding-left:0 !important;"/>







--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6--