Received this phishing email from fake bitcointalk.org domain.
Delivered-To:
escrow.ms@gmail.comReceived: by 10.28.212.17 with SMTP id l17csp2523855wmg;
Mon, 9 Oct 2017 07:29:11 -0700 (PDT)
X-Google-Smtp-Source: AOwi7QDdIiFZybulW8CV+jUqVQ7KXZqBXGvp2u/4ez4JP3+ZFmqSm5QFw4ZKfkJL/EGE5PYrYzVM
X-Received: by 10.237.34.82 with SMTP id o18mr7044823qtc.19.1507559351096;
Mon, 09 Oct 2017 07:29:11 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1507559351; cv=none;
d=google.com; s=arc-20160816;
b=b5wfmu3c1foLC3y9dmq1X7zuXp2Zt3D8yvLQNhLjsFZoiLUbgIaFAdhZ07IvXD2rqa
SmSz23Gmx6TxOTHlfRMxIWcif+kxQt9NNb+WijWE/8h3gy8UzuoU8hkE+xb6ti9rbvAx
rKL8VBNqRlFoXhxZO7lBeXmFfHbhAvMiFRBiBm4Em1PxxLUP1ehMPA2Pw/YU6fweB0OD
VZv1j30UZ3chXYXrVBpc9K5hkd3T9zcGamcRDXoHIIr++K9spgrxwybLq4Wo/bLJfSHd
g9axenVc84AP7J+hURSp4utJPKrM53/I4jBPkttFHICBiLkUEW6MqFN/gNaqKSKtBww+
BMoQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=date:sender:message-id:from:mime-version:subject:to
:arc-authentication-results;
bh=fc+aleMz2s/ZNJysrlE6NqDj+NRix6jfa9oAgr8nUQ4=;
b=UKFFYcnk0D8Owj7z/XbDifvtvxTvXxB0OulbI1G/fzSBtfHnaOpBYLi2gzKsOWa7jk
4fthEAWKoUhLDvqiolfqY9SxVuPeMmianxfqQDppoJJwW5cgnbjZmXGm1Y6WT0FVaH11
nHhQ/gWv7gFipOw7+M6tiIoy2+Vc/LJy/6ECTPtqsrXrwBtr9+Crv5FpVJyiQMJTKNog
jknUCF4P0skGh81G5kCDisBNj4WPA2htoqyzSKtSE3Z1stN/yMvtJTqUCaeSYMDS6/zT
OyilcJS3hmA1DZLvk5go8VWWq0DYWcuYzdcVXa2MllY0msr0wpBT/9oXvDj6NNXPh+qS
w48w==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: best guess record for domain of
unidade@linux2.pureteserver.com designates 192.95.39.206 as permitted sender) smtp.mailfrom=unidade@linux2.pureteserver.com
Return-Path: <
unidade@linux2.pureteserver.com>
Received: from linux2.pureteserver.com (linux2.pureteserver.com. [192.95.39.206])
by mx.google.com with ESMTPS id l6si1812704qki.238.2017.10.09.07.29.10
for <
escrow.ms@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 09 Oct 2017 07:29:11 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
unidade@linux2.pureteserver.com designates 192.95.39.206 as permitted sender) client-ip=192.95.39.206;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of
unidade@linux2.pureteserver.com designates 192.95.39.206 as permitted sender) smtp.mailfrom=unidade@linux2.pureteserver.com
Received: from unidade by linux2.pureteserver.com with local (Exim 4.89) (envelope-from <
unidade@linux2.pureteserver.com>) id 1e1Z3K-0003xL-7y for escrow.ms@gmail.com; Mon, 09 Oct 2017 11:29:06 -0300
To:
escrow.ms@gmail.comSubject: Donate to the Bitcoin Forum
X-PHP-Script: unidadedereferencia.com.br/dicas/to-all.php for 41.188.100.211, 188.114.110.183
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: <
donate@bitcointalk.org>
Message-Id: <
E1e1Z3K-0003xL-7y@linux2.pureteserver.com>
Sender: <
unidade@linux2.pureteserver.com>
Date: Mon, 09 Oct 2017 11:29:06 -0300
X-pureteserver-MailScanner-Information: Please contact the ISP for more information
X-pureteserver-MailScanner-ID: 1e1Z3K-0003xL-7y
X-pureteserver-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-pureteserver-MailScanner-SpamCheck:
X-pureteserver-MailScanner-From:
unidade@linux2.pureteserver.comX-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - linux2.pureteserver.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1081 1082] / [47 12]
X-AntiAbuse: Sender Address Domain - linux2.pureteserver.com
X-Get-Message-Sender-Via: linux2.pureteserver.com: authenticated_id: unidade/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: linux2.pureteserver.com: unidade
<html><head>
<title>Donate to the Bitcoin Forum</title>
</head>
<body>
<h1>Donate to the Bitcoin Forum</h1>
<p><b>Donation address: <a href="
http://blockexplorer.com/address/1LEaMgzwd7ESndfXRT3BUR5rDgKwSxmKbp">1LEaMgzwd7ESndfXRT3BUR5rDgKwSxmKbp</a></b></p>
<p>The Bitcoin Forum is a website meant to host free discussion of Bitcoin and related topics. It is operated mainly as a service to the community, and the vast majority of income after expenses is either saved for future expenses or reinvested into the forum or the community. The forum was started in 2009 by Satoshi Nakamoto, the original creator of Bitcoin. It is now managed by theymos, BadBear, Cyrus, and a dedicated team of moderators. Forum finances are managed by theymos.</p>
<p>If you donate 10 BTC, you can get a special "Donator" title and a green "who's online" color. If you donate 50 BTC, you get VIP status and the ability to create a custom title for yourself. Both Donators and VIPs also get access to an exclusive forum section. You <b>must</b> <a href="
https://bitcointalk.org/index.php?action=pm;sa=send;u=35">contact theymos</a> prior to donating if you want to take advantage of this offer: you will be given a unique donation address. See <a href="
https://bitcointalk.org/index.php?topic=38071.0">this forum topic</a> for more details.</p>
<p>Thank you for your interest in donating to the Bitcoin Forum!</p>
<h5>List of VIP Donators (50 BTC)</h5>
<ul>
<li>smart1985</li>
<li>Canaca</li>
<li>casascius</li>
<li>mndrix</li>
<li>Als Pawnshop</li>
<li>btcx</li>
<li>Brian DeLoach</li>
<li>zhoutong</li>
<li>Metabank.ru</li>
<li>BTC_Bear</li>
<li>pirateat40</li>
<li>znort987</li>
<li>jorgen</li>
<li>Graet</li>
<li>gigavps</li>
<li>cryptoxchange</li>
<li>BitAvenue</li>
<li>Goat</li>
<li>Btc4Domains</li>
<li>mrbrown</li>
<li>01BTC10</li>
<li>imsaguy</li>
<li>cablepair</li>
<li>BitcoinBaltar</li>
<li>usagi</li>
<li>BCB</li>
<li>eb3full</li>
<li>MemoryDealers</li>
<li>augustocroppo</li>
<li>buzzdave</li>
<li>Dustin D. Trammell a.k.a. I)ruid</li>
<li>XMLGold</li>
<li>bitconexfoier</li>
<li>johnascii</li>
<li>Hexadecibel</li>
<li>mLiberty</li>
<li>lixiaolai</li>
<li>TradeFortress</li>
</ul>
<h5>List of Donators (10 BTC)</h5>
<ul>
<li>Narydu</li>
<li>Blitzboom</li>
<li>qwk</li>
<li>shakaru</li>
<li>Lord Fog</li>
<li>FNIB</li>
<li>Transisto</li>
<li>Gyom</li>
<li>molecular</li>
<li>ribuck</li>
<li>edd</li>
<li>eldentyrell</li>
<li>chunglam</li>
<li>DeepBit</li>
<li>PMX-67-de</li>
<li>DeathAndTaxes</li>
<li>copumpkin</li>
<li>Matthew N. Wright</li>
<li>Jonathan Ryan Owens</li>
<li>cbeast</li>
<li>reeses</li>
<li>coretechs</li>
<li>mcorlett</li>
<li>bo2573</li>
<li>PatrickHarnett</li>
<li>Meni Rosenfeld</li>
<li>Boss</li>
<li>BadBitcoin</li>
<li>Seal</li>
<li>organofcorti</li>
<li>lonelyminer</li>
<li>jarsumarsu</li>
<li>bitsforcoins</li>
<li>aurumxchange</li>
<li>CAcoins</li>
<li>gnar1ta$</li>
<li>bccasino</li>
<li>BitcoinExchange</li>
<li>BrightAnarchist</li>
<li>AndyG</li>
<li>Kluge</li>
<li>lightlord</li>
<li>OgNasty</li>
<li>wogaut</li>
<li>TheBitLLC</li>
<li>deego</li>
<li>coblee</li>
<li>tgmarks</li>
<li>zefir</li>
<li>Raize</li>
<li>PsychoticBoy</li>
<li>AniceInovation</li>
<li>packet7</li>
<li>tseale</li>
<li>Blaztoize</li>
<li>ciuciu</li>
<li>minimalB</li>
<li>bitfoo</li>
<li>iSellBitcoins</li>
<li>cytokine</li>
<li>Jake</li>
<li>Fordy</li>
<li>nave</li>
<li>datafish</li>
<li>coinrolls2</li>
<li>vescudero</li>
<li>miaviator</li>
<li>ShadowAlexey</li>
<li>DeaDTerra</li>
<li>vasgolova</li>
<li>friedcat</li>
<li>Otoh</li>
<li>ianspain</li>
<li>Soros Shorts</li>
<li>bg002h</li>
<li>ElitePork</li>
<li>RustyRyan</li>
<li>deeplink</li>
<li>zebedee</li>
<li>physicist</li>
<li>gllen</li>
<li>Jutarul</li>
<li>ShadesOfMarble</li>
<li>muyuu</li>
<li>Kris</li>
<li>c_k</li>
<li>lukasbradley</li>
<li>Alwaysmining</li>
<li>Arto</li>
<li>ztex</li>
<li>BlackLilac</li>
<li>torac</li>
<li>glassuser</li>
<li>buybitcoinbycreditcard</li>
<li>betbybitcoin</li>
<li>Arcurus</li>
<li>HorseRider</li>
<li>primeasic</li>
<li>mah87</li>
<li>bitsalame</li>
<li>rpietila</li>
<li>aristodemus</li>
<li>zeroday</li>
<li>pierrejo</li>
<li>CanaryInTheMine</li>
<li>ajk</li>
<li>ASICME.COM</li>
<li>Hailong</li>
<li>betcointm</li>
<li>WhiteyAGM</li>
<li>BitBet.com</li>
<li>Spondoolies-Tech</li>
<li>BitmainWarranty</li>
<li>fluffypony</li>
<li>Claymore</li>
</ul>
<p><i>Updated: April 2017</i></p>
</body></html>
