dutch language coinbase phish
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 16 Jan 2025 15:13:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tYY66-000000001zB-0XK6
for dave@doctor.nl2k.ab.ca;
Thu, 16 Jan 2025 15:12:18 -0700
Resent-From: The Doctor
Resent-Date: Thu, 16 Jan 2025 15:12:17 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [185.228.82.170] (port=65147 helo=hosted-by.mc-node.net)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from
id 1tYX1L-00000000LbB-1By0
for doctor@doctor.nl2k.ab.ca;
Thu, 16 Jan 2025 14:03:23 -0700
From: "Coinbase"
To: doctor@doctor.nl2k.ab.ca
Subject: Wij hebben automatisch alle apparaten verwijderd die eerder aan uw account waren toegevoegd
Date: 16 Jan 2025 22:03:06 +0100
Message-ID: <20250116220306.64CEF963BC6FBEEC@help.coinbase.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Coinbase - Verifieer uw apparaat Dringend: Verifieer uw apparaat
binnen 48 uur om toegang te behouden
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[185.228.82.170 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.228.82.170 listed in dnsbl.ahbl.org]
[185.228.82.170 listed in dnsbl.ahbl.org]
[185.228.82.170 listed in dnsbl.ahbl.org]
[185.228.82.170 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.228.82.170 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.228.82.170 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.228.82.170 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.228.82.170 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
[185.228.82.170 listed in will-spam-for-food.eu.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[185.228.82.170 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.228.82.170 listed in sa-trusted.bondedsender.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.228.82.170 listed in sa-accredit.habeas.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.228.82.170 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.228.82.170 listed in bl.score.senderscore.com]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=support%40help.coinbase.com;ip=185.228.82.170;r=doctor.nl2k.ab.ca]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text
0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.3 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Wij hebben automatisch alle apparaten verwijderd die eerder aan uw account waren toegevoegd
=3D1.0">
margin: 0;
padding: 0;
background-color: #ffffff; / Achtergrondkleur lichtmodus /
color: #333333; / Tekstkleur lichtmodus /">
margin: 20px auto;
padding: 20px;
background-color: #ffffff; / Achtergrondkleur inhoud /
border-radius: 8px;
box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1)" class=3D"container">
padding-bottom: 20px" class=3D"header">
height: auto" alt=3D"Coinbase Logo" src=3D"https://logos-world.=
net/wp-content/uploads/2023/02/Coinbase-Logo.jpg" width=3D"3840" height=3D"=
2160">
font-weight: bold;
color: #2a2a2a;
text-align: center;
margin: 20px 0" class=3D"title">
Dringend: Verifieer uw apparaat binnen 48 uur om toegang te beh=
ouden
line-height: 1.5;
color: #333333;
margin: 20px 0" class=3D"content">
Wij hebben automatisch alle apparaten verwijderd die eerder =
aan uw account waren toegevoegd, om verdachte activiteit te beperken.
We doen dit in gevallen waarin er mogelijke ongewone activit=
eit is opgemerkt. Om uw toegang te behouden, is het noodzakelijk dat u uw a=
pparaat binnen 48 uur opnieuw koppelt.
Zodra u dit heeft gedaan, kunt u uw apparaat weer probleemlo=
os gebruiken met uw account.
at de knop niet te breed is /
padding: 12px 30px; / Vergroot de lengte iets /
background-color: #0061f2;
color: #ffffff;
text-align: center;
text-decoration: none;
font-size: 16px;
font-weight: bold;
border-radius: 5px;
margin: 20px auto" class=3D"button" href=3D"http://glenaven.com=
=2Eau/coinbase/">
div>
color: #555555;
text-align: center;
margin-top: 30px;
padding-top: 20px;
border-top: 1px solid #e1e1e1" class=3D"footer">
Bedankt voor het gebruik van Coinbase.
Als u vragen heeft, neem dan contact op met onze klantenserv=
ice.
Coinbase, 2025. | Coinbase Europe Limited 70 sr John Ro=
gerson, Dublin, FA 94735 ireland