James Cooper will Geld verdienen mit Spam von greentreeprofits.com

A few years ago I chose work from home as career.

I make more than many high paid jobs.

>> You have the chance to discover how do I do it <<

The success tool in making extra income online is always being one step ahead of the mob.

Knowing what’s going on behind the scenes you can make the right investments, at the right time.

No need to study complicated investment strategies, graphs, patterns, and news reports. By using this tool you can finally make money like internet experts while ‘working’ only several hours a week from anywhere in the world.

Click NOW and watch it,
James Cooper
7 Victoria Road LIDSTONE
Ireland KA27 2XF
www.YourTrainingCourseOptions.com
P.s. You have to see it ASAP, believe me or not but this can change your life

We are looking for serious people ONLY – if you are not interested please click on this link and stop getting messages like this:
Report this email – Unsubscribe this email

Lieber James Cooper, warum musst du per Spam Werbung für deinen Affiliate Link machen und dann noch auf so eine windige Seite verlinken? Keine Ahnung warum, aber die bei der Adresse genannte Url YourTrainingCourseOptions.com ist nicht registriert und verlinkt genauso wie der Link im Text auf die greentreeprofits.com mit deinem Affiliate Link. Du willst einfach nur dumme Leute finden, die sich über deinen Affiliate Link Anmelden und Teilnehmen. Dadurch erhältst du dann Provision.

So wird man zum Ziel geschickt und abkassiert

tracking.fast-profit.online/ATMv3/index.php/campaigns/xxxxx/track-url/xxxxx/xxxx (Link in der Mail) 

fnnt.co/click.php?project_id=xbcustom1=ROpeners7

greentreeprofits.com/?project_id=xb&intgrtn_clickID=xxxx&intgrtn_custom1=ROpeners7&intgrtn_redirectReturningLead=auto

Versandadresse der Spammail:

Versandadresse: James Cooper – btcdepartment3@fast-profit.online

Verlinkung in der Spammail:

In der Mail wird auf diese Url verlinkt: fast-profit.online -> greentreeprofits.com

Inhaberdaten der verwendeten Domain(s):

fast-profit.online

Domaininhaber mittels WhoisGuard, Inc. verschleiert

greentreeprofits.com

Domaininhaber mittels WhoisGuard Protected verschleiert

Mailheader der Spammail:

Return-path: <btcdepartment3@fast-profit.online>
Delivery-date: Fri, 05 Oct 2018 14:00:46 +0200
Received: from [195.4.92.118] (helo=smtp8.freenet.de)
by mbox19.freenet.de with esmtpa (ID exim) (Exim 4.90_1 #2)
id 1g8Omk-0002A5-Jj
for allgemeiner-spam@internet-beschwerdestelle.de; Fri, 05 Oct 2018 14:00:46 +0200
Received: from irj0.fast-profit.online ([151.80.255.173]:44348)
by smtp8.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (port 25) (Exim 4.90_1 #2)
id 1g8Omk-0000Rg-H8
for allgemeiner-spam@internet-beschwerdestelle.de; Fri, 05 Oct 2018 14:00:46 +0200
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=fast-profit.online;
h=Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:List-Id:MIME-Version:Content-Type; i=btcdepartment3@fast-profit.online;
bh=wcDYMZXdvB7dRb3fArvrDtmc0io=;
b=X2ZSdGi+c/uafgPiz9CLkxEReyPOdC/LQhaGSWo34It9OWVozEST6t+SEE9msKqrKjGTLwrSjiDSa
joy2Z/TlVdYxsmzrsgsgTZDUrJsHIjF5FXlIxjdoitM+oBy0i/vQieYkZ35rB590KBrck/vF/OQ1fY
fhkF647afOA5qP0owQw=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=fast-profit.online;
b=dH9ii/8MsdfguXzkwgVCHV2uiOjYreeX3S3q2aHEjcHqB+wBkj0j7JDhlHISRv7il11Fjs4Gq8a7rrL
nGcwQlkJ7AIziK3ef3qRntfsgUnDU7iRRqTngMEt1pqlMB7kONxIGntmMV53L+vd+9sEXHhf5yGr/ZN
Lerv16rGcMAdhzM0YONQ=;
Date: Fri, 5 Oct 2018 10:29:02 +0000
To: “allgemeiner-spam@internet-beschwerdestelle.de” <allgemeiner-spam@internet-beschwerdestelle.de>
From: James Cooper <btcdepartment3@fast-profit.online>
Reply-To: James Cooper <reply@fast-profit.online>
Subject: allgemeiner-spam@internet-beschwerdestelle.de Be the first to benefit from this
Message-ID: <61f28c43fg8e6f5bf2ced0f3a6e@fast-profit.online>
X-Mw-Campaign-Uid: rm159fgcgz69a5
X-Mw-Subscriber-Uid: tm90fg4o3am3bf
X-Mw-Customer-Uid: vh90fgy8p57a8c
X-Mw-Customer-Gid: 0
X-Mw-Delivery-Sid: 3
X-Mw-Tracking-Did: 3
List-Unsubscribe: <http://tracking.fast-profit.online/ATMv3/index.php/lists/gy14glf98ba/unsubscribe/tmfg94o3am3bf/rmfg5cgz69a5/unsubscribe-direct?source=email-client-unsubscribe-button>, <mailto:reply@fast-profit.online?subject=Campaign-Uid:rm159fgz69a5 / Subscriber-Uid:tm9fsg94ofg3am3bf – Unsubscribe request&body=Please unsubscribe me!>
List-Id: gyfg1z5lf98ba <Openers List>
X-Report-Abuse: Please report abuse for this campaign here: http://tracking.fast-profit.online/ATMv3/index.php/campaigns/rm15fggz69a5/report-abuse/gfg1z5lf98ba/tmfg4o3am3bf
Feedback-ID: rm1fggz69a5:tm9fgo3am3bf:gy1fg98ba:vh90fggfsg57a8c
Precedence: bulk
X-Mw-EBS: http://tracking.fast-profit.online/ATMv3/index.php/lists/block-address
X-Sender: admin@fast-profit.online
X-Receiver: allgemeiner-spam@internet-beschwerdestelle.de
X-Mw-Mailer: PHPMailer – 5.2.21
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”b1_eb40775sgh8d63c3fdefggghnj7560b800ed8″
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3509; s=default;
t=15fg8735342; c=relaxed/simple;
h=From:To:Date:Subject;
d=fast-profit.online;
z=From:=20James=20Cooper=20<btcdepartment3@fast-profit.online>
|To:=20″allgemeiner-spam@internet-beschwerdestelle.de”=20<allgemeiner-spam@internet-beschwerdestelle.de>
|Date:=20Fri,=205=20Oct=202018=2010:29:02=20+0000
|Subject:=20allgemeiner-spam@internet-beschwerdestelle.de=20Be=20the=20first=20to=20benefit=20from=20this;
bh=U4nfzDkQx4+vsqYKfghLLvM+nfIB+nzIfeDDghCoojVc=;
b=RX04DkydATUs3vuvxU7D/U+43fgou72f3UqZdQNDwgwCyRh6iqvDhPhzXHK+Vr5qcDVK/5hf+tLf3h2DsSNwnaEAfgS0EPgsTcY4EtnOHAHa1yYvwXeOBdCtXZi1K3gh4zSaClGFZixdT+sINY/rYfGIErtntPn3ctdt855DCKH6s=
X-Spamscore: 8.8 (++++++++)
X-Spamreport: Action: add header
Symbol: HAS_REPLYTO(0.00)
Symbol: DMARC_BAD_POLICY(0.00)
Symbol: R_DKIM_REJECT(0.00)
Symbol: R_SPF_ALLOW(-0.20)
Symbol: REPLYTO_DN_EQ_FROM_DN(0.00)
Symbol: NEURAL_SPAM(2.68)
Symbol: DKIM_MIXED(0.00)
Symbol: URI_COUNT_ODD(1.00)
Symbol: DKIM_TRACE(0.00)
Symbol: MAILLIST(-0.10)
Symbol: RCVD_COUNT_ONE(0.00)
Symbol: FREEMAIL_TO(0.00)
Symbol: FROM_EQ_ENVFROM(0.00)
Symbol: AUTOGEN_PHP_SPAMMY(1.00)
Symbol: PHISHING(1.16)
Symbol: MID_RHS_MATCH_FROM(0.00)
Symbol: ONCE_RECEIVED(0.10)
Symbol: R_DKIM_ALLOW(-0.20)
Symbol: FROM_HAS_DN(0.00)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: PRECEDENCE_BULK(0.00)
Symbol: MIME_GOOD(-0.10)
Symbol: REPLYTO_DOM_EQ_FROM_DOM(0.00)
Symbol: HAS_LIST_UNSUB(-0.01)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: FREEMAIL_ENVRCPT(0.00)
Symbol: TO_DN_EQ_ADDR_ALL(0.00)
Symbol: FN_RBL_SEMIWANTED(3.50)
Symbol: RCVD_TLS_ALL(0.00)
Symbol: GREYLIST(0.00)
Message: (SPF): spf allow
Message-ID: 61f28c43eghda88e6f5bf2cedhdghdhc3a6e@fast-profit.online
X-FN-Spambar: —
X-Warning: obfuscated html,spam pattern,spaced spam,no DNS reverse,spam subject,advertised URL,advertised phone number,Spam signature,Bulk.Advertising signature,Bulk.Porn signature,Bulk signature,Suspect Signature
Delivered-To: allgemeiner-spam@internet-beschwerdestelle.de
Envelope-to: allgemeiner-spam@internet-beschwerdestelle.de