Cryptocurrency phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 12 Aug 2025 09:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1ulrHl-00000000Ejd-0nyM
for dave@doctor.nl2k.ab.ca;
Tue, 12 Aug 2025 09:51:37 -0600
Resent-From: The Doctor
Resent-Date: Tue, 12 Aug 2025 09:51:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out12-118.antispamcloud.com ([185.201.16.118]:33104)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1ulqhi-00000000ATy-3KKG;
Tue, 12 Aug 2025 09:14:31 -0600
Received: from iix1290.idcloudhost.com ([103.63.24.141])
by mx294.antispamcloud.com with esmtpsa (TLSv1.3:TLS_AES_256_GCM_SHA384:256)
(Exim 4.92)
(envelope-from)
id 1ulqfU-001XQ9-6E; Tue, 12 Aug 2025 17:12:23 +0200
Received: from [::1] (port=40990 helo=iix1290.idcloudhost.com)
by iix1290.idcloudhost.com with esmtpa (Exim 4.98.2)
(envelope-from)
id 1ulqBw-0000000At3H-2wRo;
Tue, 12 Aug 2025 21:41:31 +0700
MIME-Version: 1.0
Date: Tue, 12 Aug 2025 21:41:26 +0700
From: Lennon Greene
To: undisclosed-recipients:;
Subject: New Finding - It's time you listen to me
Reply-To: Noreply
Mail-Reply-To: Noreply
User-Agent: Roundcube Webmail/1.6.11
Message-ID: <324eff59aa94f93c89e26389595ae15d@smpmuad.sch.id>
X-Sender: info@smpmuad.sch.id
Content-Type: multipart/alternative;
boundary="=_5a4edf6a4a4996031b3ca4dfb09ee190"
X-AuthUser: info@smpmuad.sch.id
X-Originating-IP: 103.63.24.141
X-Spampanel-Domain: cloudhost.id
X-Spampanel-Username: iix1290
Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=iix1290@cloudhost.id
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVzkKdCtcsyq2M+fj6t3NdnVaPuWW65IIT8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X-Report-Abuse-To: spam@quarantine15.antispamcloud.com
X-Complaints-To: abuse@master.antispamcloud.com
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Isn't it great news? You can now borrow cryptocurrency worth
of $5.00 to $800,000.00 using just your registered phone number and legal
name. Click borrow now to check your eligibility and proceed with your first
free Crypto Loan.
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[185.201.16.118 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
2.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} New Finding - It's time you listen to me
--=_5a4edf6a4a4996031b3ca4dfb09ee190
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Isn't it great news?
You can now borrow cryptocurrency worth of $5.00 to $800,000.00 using
just your registered phone number and legal name.
Click borrow now to check your eligibility and proceed with your first
free Crypto Loan.
You don't need to make an initial payment.
BORROW NOW [1]
With Summer.fi, effortlessly earn the best yields and grow your capital
faster. We automatically rebalance your assets to top protocols,
maximizing your returns.
Regards
Angela Grisham
Marketer/Loan Officer SUMMER.FI
Links:
------
[1] https://www.arsinsa.com.py/productos/redirect/borrow.html
--=_5a4edf6a4a4996031b3ca4dfb09ee190
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
=3DUTF-8" />
eva,sans-serif'>
,sans-serif;">
va,sans-serif;">
neva,sans-serif;">
Geneva,sans-serif;">
a,Geneva,sans-serif;">
ana,Geneva,sans-serif;">
rdana,Geneva,sans-serif;">
Verdana,Geneva,sans-serif;">
: Verdana,Geneva,sans-serif;">
ly: Verdana,Geneva,sans-serif;">
mily: Verdana,Geneva,sans-serif;">
family: Verdana,Geneva,sans-serif;">
t-family: Verdana,Geneva,sans-serif;">
ont-family: Verdana,Geneva,sans-serif;">
font-family: Verdana,Geneva,sans-serif;">
t; font-family: Verdana,Geneva,sans-serif;">
0pt; font-family: Verdana,Geneva,sans-serif;">
10pt; font-family: Verdana,Geneva,sans-serif;">
ize: 10pt; font-family: Verdana,Geneva,sans-serif;">
-size: 10pt; font-family: Verdana,Geneva,sans-serif;">
nt-size: 10pt; font-family: Verdana,Geneva,sans-serif;">
margin: 0px; padding-top: 32px; background-color: #f8f8f8;">
ng=3D"0" cellpadding=3D"0">
in-left: auto; height: 666.831px;" align=3D"center">
=
=
a(0, 0, 0, 0.05) 0px 3px 0px; border-bottom-left-radius: 8px; border-bottom=
-right-radius: 8px; overflow: hidden; border: 1px solid #c8c8c8 !important;=
height: 505.078px;">
=
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 12 Aug 2025 09:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1ulrHl-00000000Ejd-0nyM
for dave@doctor.nl2k.ab.ca;
Tue, 12 Aug 2025 09:51:37 -0600
Resent-From: The Doctor
Resent-Date: Tue, 12 Aug 2025 09:51:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out12-118.antispamcloud.com ([185.201.16.118]:33104)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1ulqhi-00000000ATy-3KKG;
Tue, 12 Aug 2025 09:14:31 -0600
Received: from iix1290.idcloudhost.com ([103.63.24.141])
by mx294.antispamcloud.com with esmtpsa (TLSv1.3:TLS_AES_256_GCM_SHA384:256)
(Exim 4.92)
(envelope-from
id 1ulqfU-001XQ9-6E; Tue, 12 Aug 2025 17:12:23 +0200
Received: from [::1] (port=40990 helo=iix1290.idcloudhost.com)
by iix1290.idcloudhost.com with esmtpa (Exim 4.98.2)
(envelope-from
id 1ulqBw-0000000At3H-2wRo;
Tue, 12 Aug 2025 21:41:31 +0700
MIME-Version: 1.0
Date: Tue, 12 Aug 2025 21:41:26 +0700
From: Lennon Greene
To: undisclosed-recipients:;
Subject: New Finding - It's time you listen to me
Reply-To: Noreply
Mail-Reply-To: Noreply
User-Agent: Roundcube Webmail/1.6.11
Message-ID: <324eff59aa94f93c89e26389595ae15d@smpmuad.sch.id>
X-Sender: info@smpmuad.sch.id
Content-Type: multipart/alternative;
boundary="=_5a4edf6a4a4996031b3ca4dfb09ee190"
X-AuthUser: info@smpmuad.sch.id
X-Originating-IP: 103.63.24.141
X-Spampanel-Domain: cloudhost.id
X-Spampanel-Username: iix1290
Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=iix1290@cloudhost.id
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVzkKdCtcsyq2M+fj6t3NdnVaPuWW65IIT8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X-Report-Abuse-To: spam@quarantine15.antispamcloud.com
X-Complaints-To: abuse@master.antispamcloud.com
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Isn't it great news? You can now borrow cryptocurrency worth
of $5.00 to $800,000.00 using just your registered phone number and legal
name. Click borrow now to check your eligibility and proceed with your first
free Crypto Loan.
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[103.63.24.141 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
[185.201.16.118 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[103.63.24.141 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
[185.201.16.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.63.24.141 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[185.201.16.118 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
2.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} New Finding - It's time you listen to me
--=_5a4edf6a4a4996031b3ca4dfb09ee190
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Isn't it great news?
You can now borrow cryptocurrency worth of $5.00 to $800,000.00 using
just your registered phone number and legal name.
Click borrow now to check your eligibility and proceed with your first
free Crypto Loan.
You don't need to make an initial payment.
BORROW NOW [1]
With Summer.fi, effortlessly earn the best yields and grow your capital
faster. We automatically rebalance your assets to top protocols,
maximizing your returns.
Regards
Angela Grisham
Marketer/Loan Officer SUMMER.FI
Links:
------
[1] https://www.arsinsa.com.py/productos/redirect/borrow.html
--=_5a4edf6a4a4996031b3ca4dfb09ee190
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
=3DUTF-8" />
eva,sans-serif'>
,sans-serif;">
va,sans-serif;">
neva,sans-serif;">
Geneva,sans-serif;">
a,Geneva,sans-serif;">
ana,Geneva,sans-serif;">
rdana,Geneva,sans-serif;">
Verdana,Geneva,sans-serif;">
: Verdana,Geneva,sans-serif;">
ly: Verdana,Geneva,sans-serif;">
mily: Verdana,Geneva,sans-serif;">
family: Verdana,Geneva,sans-serif;">
t-family: Verdana,Geneva,sans-serif;">
ont-family: Verdana,Geneva,sans-serif;">
font-family: Verdana,Geneva,sans-serif;">
t; font-family: Verdana,Geneva,sans-serif;">
0pt; font-family: Verdana,Geneva,sans-serif;">
10pt; font-family: Verdana,Geneva,sans-serif;">
ize: 10pt; font-family: Verdana,Geneva,sans-serif;">
-size: 10pt; font-family: Verdana,Geneva,sans-serif;">
nt-size: 10pt; font-family: Verdana,Geneva,sans-serif;">
margin: 0px; padding-top: 32px; background-color: #f8f8f8;">
ng=3D"0" cellpadding=3D"0">
in-left: auto; height: 666.831px;" align=3D"center">
a(0, 0, 0, 0.05) 0px 3px 0px; border-bottom-left-radius: 8px; border-bottom=
-right-radius: 8px; overflow: hidden; border: 1px solid #c8c8c8 !important;=
height: 505.078px;">
--=_5a4edf6a4a4996031b3ca4dfb09ee190--