It\’s all set already – Your account is still pending – Bitcoin Spam

Na da lassen sich die Spammer aber immer mal wieder was neues einfallen um Leute per Affiliate Link auf eine Landingpage zu locken und dort nur das beste von Bitcoin, Geld verdienen und wie einfach es ist zu schreiben. Natürlich wird hier nur alle in den höchsten Tönen gelobt und alles negative und Gefahren unter den Teppich fallen gelassen.

 

Spammer benutzen auch schon mal Lügen und Unterstellungen um Leute dazu zu bewegen auf den Link zu klicken.

 

Schauen wir uns mal den Weg an, den man geht…

pola.nc5minsk.com/Mail/CountLink.aspx?SID=143xxx892109&LID=2xx271 ( Link in der Mail )

301 Redirect

http://bitprofits.net

302 Redirect

https://bitprofits.net/

 

 

Fazit:

Löschen Sie diese Mail und fallen Sie nicht auf die Lügen des Spammers rein. Wer sich mit Bitcoins nicht auskennt kann ganz schnell sein eigenes Geld verlieren

 

 

nc5minsk.com

IP Address Autonomous System Number (ASN) Internet Service Provider (ISP) / Organization Location
162.255.119.80 AS22612 Namecheap, Inc. Namecheap USA
185.162.125.238 AS205209 Binat Business Ltd O.m.c. Computers & Communications Ltd Israel
Domain:   nc5minsk.com
IP-Adresse:   162.255.119.80
Region:   Los Angeles (US)

 

 

Domaininhaber mittels WhoisGuard Protected verschleiert

 

 

bitprofits.net

IP Address Autonomous System Number (ASN) Internet Service Provider (ISP) / Organization Location
95.179.145.205 AS Choopa, LLC Netherlands
Domain:   bitprofits.net
IP-Adresse:   95.179.145.205
Provider:   Cosmoline Telecommunication Services S.A.
Region:   Rafína (GR)

 

 

 

Domaininhaber mittels WhoisGuard Protected verschleiert

 

 

Die Mail kommt von George Tailor – george@nc4formula.com und beworben wird die Url pola.nc5minsk.com -> bitprofits.net
Die IP-Adresse lautet 95.179.145.205 und der ISP ist in Netherlands zu finden. ( Cosmoline Telecommunication Services S.A. )

It\'s all set already - Your account is still pending - Bitcoin Spam
Text und Bilder zu der Spammail:
It\'s all set already - Your account is still pending - Bitcoin Spam

Your account is still pending

Greetings,

Thanks for your recent Inquiry with Us. You can start changing your life today.
We provide the opportunity to learn where and when to invest with incredible results. Simply activate to your account to start earning.
Continue to Activate

For more details, you may review our site or email us.

Thank you,
George Tailor, VP New Accounts

You received this message because you have expressed your interest to be informed about the positions and activities.
This email is fully consistent with the protection of personal data of users who have expressed interest in the information.
Your email can be erased permanently from this list by replying to a blank email.

If you would like to unsubscribe from future newsletters click here

It\'s all set already - Your account is still pending - Bitcoin Spam

It\'s all set already - Your account is still pending - Bitcoin Spam
Mailheader der Spammail:
It\'s all set already - Your account is still pending - Bitcoin Spam
Return-path: <wilbur@nc4julypan.com>
Delivery-date: Tue, 04 Dec 2018 19:24:31 +0100
Received: from [195.4.92.117] (helo=smtp7.freenet.de)
by mbox19.freenet.de with esmtpa (ID exim) (Exim 4.90_1 #2)
id 1gUFN1-0000qq-ID
for nerv@mich.net; Tue, 04 Dec 2018 19:24:31 +0100
Received: from rns3.nc4julypan.com ([185.237.98.41]:41210)
by smtp7.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (port 25) (Exim 4.90_1 #2)
id 1gUFN1-000209-Ed
for nerv@mich.net; Tue, 04 Dec 2018 19:24:31 +0100
List-Unsubscribe: <http://pola.nc5minsk.com/Contacts/RemoveFromLists.aspx?ID=gDdoExoqyghgesVscW2T3d4ko2VZbTdLVghf1M4IMx%2bIW6%2fS1gsMghmCri%2f5zrZj&UID=Tmgh6FiugAo%3d&EID=4gBLthg6%2firHVFHvyJw1bhg%3d%3d>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nc4julypan.com;
s=mcxg; t=1543gh51363;
bh=8InvqPshsmjLghbn68Iohe8GWDant6smNW6xG0INgS9U=;
h=From:To:Reply-To:Date:Subject;
b=O6nCkNv6lQBp1gTpGI+3jghyH86oEsJOQHp8e7Biio4ro/tBAE09gh1BlYS19p3
NMNV4HY8jj6h7F14TB2NEjVgh/jpz/y5/BQ9zcLKhuj0olc1OgXvRghedDiBtio2KlT
kjBWzs5pKIXyMUhmDukBQZCJMrghboKktSttFvKo=
MIME-Version: 1.0
From: George Tailor <george@nc4formula.com></george@nc4formula.com>
Sender: wilbur@nc4julypan.com
To: nerv@mich.net
Reply-To: George Tailor <george@nc4formula.com>
Date: 4 Dec 2018 20:24:31 +0200
Subject: It’s all set already
Content-Type: multipart/alternative;
boundary=–boundary_449gh89_093gha9cb-c09c-4ahgd-b15b-5f8ghcd2543e
Message-Id: <201812gh4192243.8Dgh7143FBhA@nc4julypan.com>
X-Spamscore: 3.8 (+++)
X-Spamreport: Action: no action
Symbol: HAS_REPLYTO(0.00)
Symbol: SUBJ_EXCESS_BASE64(1.50)
Symbol: FROM_EXCESS_BASE64(1.50)
Symbol: R_SPF_ALLOW(-0.20)
Symbol: TO_DN_NONE(0.00)
Symbol: NEURAL_SPAM(1.00)
Symbol: DKIM_TRACE(0.00)
Symbol: MIME_BASE64_TEXT(0.10)
Symbol: RCVD_COUNT_ONE(0.00)
Symbol: FORGED_SENDER(0.30)
Symbol: FREEMAIL_TO(0.00)
Symbol: MIME_TRACE(0.00)
Symbol: IP_SCORE(2.27)
Symbol: ASN(0.00)
Symbol: FROM_NEQ_ENVFROM(0.00)
Symbol: BAYES_HAM(-3.00)
Symbol: REPLYTO_EXCESS_BASE64(0.00)
Symbol: ONCE_RECEIVED(0.10)
Symbol: SUBJECT_ENDS_SPACES(0.50)
Symbol: R_DKIM_ALLOW(-0.20)
Symbol: REPLYTO_EQ_FROM(0.00)
Symbol: FROM_HAS_DN(0.00)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: FREEMAIL_ENVRCPT(0.00)
Symbol: MIME_GOOD(-0.10)
Symbol: DMARC_NA(0.00)
Symbol: HAS_LIST_UNSUB(-0.01)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: FN_TRIE_SYM2(0.00)
Symbol: RCVD_TLS_ALL(0.00)
Message: (SPF): spf allow
Message-ID: 201812gh4192243.8Dgh7143FBhA@nc4julypan.com
X-FN-Spambar:
Delivered-To: nerv@mich.net
Envelope-to: nerv@mich.net

 

Verlinken Sie diesen Beitrag:

<a href="https://www.spammails.net/its-all-set-already-your-account-is-still-pending-bitcoin-spam/">It\’s all set already – Your account is still pending – Bitcoin Spam</a>