Na da lassen sich die Spammer aber immer mal wieder was neues einfallen um Leute per Affiliate Link auf eine Landingpage zu locken und dort nur das beste von Bitcoin, Geld verdienen und wie einfach es ist zu schreiben. Natürlich wird hier nur alle in den höchsten Tönen gelobt und alles negative und Gefahren unter den Teppich fallen gelassen.
Spammer benutzen auch schon mal Lügen und Unterstellungen um Leute dazu zu bewegen auf den Link zu klicken.
Schauen wir uns mal den Weg an, den man geht…
pola.nc5minsk.com/Mail/CountLink.aspx?SID=143xxx892109&LID=2xx271 ( Link in der Mail )
http://bitprofits.net
https://bitprofits.net/
Fazit:
Löschen Sie diese Mail und fallen Sie nicht auf die Lügen des Spammers rein. Wer sich mit Bitcoins nicht auskennt kann ganz schnell sein eigenes Geld verlieren
nc5minsk.com
| IP Address | Autonomous System Number (ASN) | Internet Service Provider (ISP) / Organization | Location |
|---|---|---|---|
| 162.255.119.80 | AS22612 Namecheap, Inc. | Namecheap | USA |
| 185.162.125.238 | AS205209 Binat Business Ltd | O.m.c. Computers & Communications Ltd | Israel |
| Domain: | nc5minsk.com | |
| IP-Adresse: | 162.255.119.80 | |
| Region: | Los Angeles (US) |
Domaininhaber mittels WhoisGuard Protected verschleiert
bitprofits.net
| IP Address | Autonomous System Number (ASN) | Internet Service Provider (ISP) / Organization | Location |
|---|---|---|---|
| 95.179.145.205 | AS | Choopa, LLC | Netherlands |
| Domain: | bitprofits.net | |
| IP-Adresse: | 95.179.145.205 | |
| Provider: | Cosmoline Telecommunication Services S.A. | |
| Region: | Rafína (GR) |
Domaininhaber mittels WhoisGuard Protected verschleiert
Die Mail kommt von George Tailor – george@nc4formula.com und beworben wird die Url pola.nc5minsk.com -> bitprofits.net
Die IP-Adresse lautet 95.179.145.205 und der ISP ist in Netherlands zu finden. ( Cosmoline Telecommunication Services S.A. )
Text und Bilder zu der Spammail:
Your account is still pending
Greetings,
Thanks for your recent Inquiry with Us. You can start changing your life today.
We provide the opportunity to learn where and when to invest with incredible results. Simply activate to your account to start earning.
Continue to Activate
For more details, you may review our site or email us.
Thank you,
George Tailor, VP New Accounts
You received this message because you have expressed your interest to be informed about the positions and activities.
This email is fully consistent with the protection of personal data of users who have expressed interest in the information.
Your email can be erased permanently from this list by replying to a blank email.
If you would like to unsubscribe from future newsletters click here
Mailheader der Spammail:
Return-path: <wilbur@nc4julypan.com>
Delivery-date: Tue, 04 Dec 2018 19:24:31 +0100
Received: from [195.4.92.117] (helo=smtp7.freenet.de)
by mbox19.freenet.de with esmtpa (ID exim) (Exim 4.90_1 #2)
id 1gUFN1-0000qq-ID
for allgemeiner-spam@internet-beschwerdestelle.de; Tue, 04 Dec 2018 19:24:31 +0100
Received: from rns3.nc4julypan.com ([185.237.98.41]:41210)
by smtp7.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (port 25) (Exim 4.90_1 #2)
id 1gUFN1-000209-Ed
for allgemeiner-spam@internet-beschwerdestelle.de; Tue, 04 Dec 2018 19:24:31 +0100
List-Unsubscribe: <http://pola.nc5minsk.com/Contacts/RemoveFromLists.aspx?ID=gDdoExoqyghgesVscW2T3d4ko2VZbTdLVghf1M4IMx%2bIW6%2fS1gsMghmCri%2f5zrZj&UID=Tmgh6FiugAo%3d&EID=4gBLthg6%2firHVFHvyJw1bhg%3d%3d>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nc4julypan.com;
s=mcxg; t=1543gh51363;
bh=8InvqPshsmjLghbn68Iohe8GWDant6smNW6xG0INgS9U=;
h=From:To:Reply-To:Date:Subject;
b=O6nCkNv6lQBp1gTpGI+3jghyH86oEsJOQHp8e7Biio4ro/tBAE09gh1BlYS19p3
NMNV4HY8jj6h7F14TB2NEjVgh/jpz/y5/BQ9zcLKhuj0olc1OgXvRghedDiBtio2KlT
kjBWzs5pKIXyMUhmDukBQZCJMrghboKktSttFvKo=
MIME-Version: 1.0
From: George Tailor <george@nc4formula.com></george@nc4formula.com>
Sender: wilbur@nc4julypan.com
To: allgemeiner-spam@internet-beschwerdestelle.de
Reply-To: George Tailor <george@nc4formula.com>
Date: 4 Dec 2018 20:24:31 +0200
Subject: It’s all set already
Content-Type: multipart/alternative;
boundary=–boundary_449gh89_093gha9cb-c09c-4ahgd-b15b-5f8ghcd2543e
Message-Id: <201812gh4192243.8Dgh7143FBhA@nc4julypan.com>
X-Spamscore: 3.8 (+++)
X-Spamreport: Action: no action
Symbol: HAS_REPLYTO(0.00)
Symbol: SUBJ_EXCESS_BASE64(1.50)
Symbol: FROM_EXCESS_BASE64(1.50)
Symbol: R_SPF_ALLOW(-0.20)
Symbol: TO_DN_NONE(0.00)
Symbol: NEURAL_SPAM(1.00)
Symbol: DKIM_TRACE(0.00)
Symbol: MIME_BASE64_TEXT(0.10)
Symbol: RCVD_COUNT_ONE(0.00)
Symbol: FORGED_SENDER(0.30)
Symbol: FREEMAIL_TO(0.00)
Symbol: MIME_TRACE(0.00)
Symbol: IP_SCORE(2.27)
Symbol: ASN(0.00)
Symbol: FROM_NEQ_ENVFROM(0.00)
Symbol: BAYES_HAM(-3.00)
Symbol: REPLYTO_EXCESS_BASE64(0.00)
Symbol: ONCE_RECEIVED(0.10)
Symbol: SUBJECT_ENDS_SPACES(0.50)
Symbol: R_DKIM_ALLOW(-0.20)
Symbol: REPLYTO_EQ_FROM(0.00)
Symbol: FROM_HAS_DN(0.00)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: FREEMAIL_ENVRCPT(0.00)
Symbol: MIME_GOOD(-0.10)
Symbol: DMARC_NA(0.00)
Symbol: HAS_LIST_UNSUB(-0.01)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: FN_TRIE_SYM2(0.00)
Symbol: RCVD_TLS_ALL(0.00)
Message: (SPF): spf allow
Message-ID: 201812gh4192243.8Dgh7143FBhA@nc4julypan.com
X-FN-Spambar:
Delivered-To: allgemeiner-spam@internet-beschwerdestelle.de
Envelope-to: allgemeiner-spam@internet-beschwerdestelle.de
in Germany