Bitcoin Forum
October 19, 2017, 12:34:00 AM *
News: Latest stable version of Bitcoin Core: 0.15.0.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1] 2 »  All
  Print  
Author Topic: New Coinbase Spam  (Read 1847 times)
cableiso
Member
**
Offline Offline

Activity: 89


View Profile
October 29, 2013, 10:59:46 AM
 #1

I'm recently getting spam from coinbase pretending to be from this forum.  Is this the result of the recent hack?  Anyone else getting it?  Poorly worded, asking for donations or to sign up for gambling sites?
1508373240
Hero Member
*
Offline Offline

Posts: 1508373240

View Profile Personal Message (Offline)

Ignore
1508373240
Reply with quote  #2

1508373240
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1508373240
Hero Member
*
Offline Offline

Posts: 1508373240

View Profile Personal Message (Offline)

Ignore
1508373240
Reply with quote  #2

1508373240
Report to moderator
rampalija
Member
**
Offline Offline

Activity: 112


View Profile
October 29, 2013, 01:12:17 PM
 #2

i didnt get any of that messages
Mitchell
Staff
Legendary
*
Offline Offline

Activity: 1596


Verified awesomeness ✔


View Profile WWW
October 29, 2013, 01:14:25 PM
 #3

I keep getting those kinds of e-mails too. They do not originate from CoinBase but from someone spoofing that.

          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
.
|
.
|
          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
unthy
TheNewAnon135246
Legendary
*
Offline Offline

Activity: 1442



View Profile WWW
October 29, 2013, 01:30:57 PM
 #4

I saw someone also made a post about this in General Discussion. It seems to be a phishing scam.

BitSend ◢◤Clients | Source
www.bitsend.info
█▄
█████▄
████████▄
███████████▄
██████████████
███████████▀
████████▀
█████▀
█▀












Segwit | Core 0.14 | Masternodes
XEVAN | DK3 | Electrum soon
Bitcore - BTX/BTC -Project












BSD -USDT | Bittrex | C.Gather | S.Exchange
Cryptopia | NovaExchange | Livecoin
Litebit.eu | Faucet | Bitsend Airdrop













████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████

████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████
MoneyGod
Sr. Member
****
Offline Offline

Activity: 406



View Profile
October 29, 2013, 01:40:24 PM
 #5

I saw someone also made a post about this in General Discussion. It seems to be a phishing scam.

I have never message like this may some scammer trying to do something here

gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 29, 2013, 02:08:09 PM
 #6

i got 3 eamils the full content is (my address removed for protection)
Quote
Return-Path: <donate@coinbase.com>
Received: from smtp02-forward-0.daemonmail.net (smtp02-forward-0.daemonmail.net [216.104.163.150]) by sm03.internetmailserver.net with SMTP;
   Sun, 27 Oct 2013 21:13:41 -0700
Received: from mxw04.daemonmail.net (unknown [216.104.161.14])
   by smtp02-forward-0.daemonmail.net (Postfix) with ESMTP id 2D1628132E
   for <*@appropriatesystems.com>; Sun, 27 Oct 2013 20:57:52 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
   by mxw04.daemonmail.net (Postfix) with ESMTP id 2F8B52A71E6
   for <*@garrettbattaglia.info>; Sun, 27 Oct 2013 20:57:51 -0700 (PDT)
X-Virus-Scanned: Debian amavisd-new at mxw04.daemonmail.net
X-Spam-Flag: NO
X-Spam-Score: 0.496
X-Spam-Level:
X-Spam-Status: No, score=0.496 tagged_above=-20 required=4
   tests=[BAYES_40=-0.001, MISSING_MID=0.497] autolearn=no
Received: from mxw04.daemonmail.net ([127.0.0.1])
   by localhost (mxw04.daemonmail.net [127.0.0.1]) (amavisd-new, port 10024)
   with ESMTP id Kz2rsgXq+feO for <*@garrettbattaglia.info>;
   Sun, 27 Oct 2013 20:57:49 -0700 (PDT)
Received: from netgains11422.netgainstechnologies.com (netgains11422.netgainstechnologies.com [180.179.114.22])
   by mxw04.daemonmail.net (Postfix) with ESMTP id 3FF452A71E5
   for <*@garrettbattaglia.info>; Sun, 27 Oct 2013 20:57:47 -0700 (PDT)
Received: from home-91e15d0351.user.nevalink.net (UnknownHost [89.223.47.197]) by netgains11421.netgainstechnologies.com with SMTP;
   Mon, 28 Oct 2013 09:25:58 +0530
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Bitcoin Awaiting your order confirmation
To: *@garrettbattaglia.info
From: donate@coinbase.com
Date: Mon, 28 Oct 2013 07:57:28 +0400
Reply-To: donation@coinbase.com
Return-receipt-to: donation@coinbase.com
X-Rcpt-To: <*@appropriatesystems.com>
Message-ID: <72dbdc94e0764e08a510a668727fb45c@com>
X-SmarterMail-Spam: SPF_Fail, SpamAssassin 0 [raw: 0], DK_None, DKIM_None
X-SmarterMail-TotalSpamWeight: 5


Donate to the Bitcoin Forum

Donation =


Bitcoin address:   1KaEvEH1eWf8EXnrUCdsMNt9TucYGXwTZU

Litecoin address:   LXHR3ThQz2qrJqEXJrce2GsTzEdh5JCZG2

The Bitcoin Forum is a website meant to host free discussion of Bitcoin and=
 related topics. It is operated as a service to the community, and all prof=
it is reinvested into the forum. It was started in 2009 by Satoshi Nakamoto=
, the original creator of Bitcoin. It is now managed by Malmi Martti (Siriu=
s), Stefan Thomas (justmoon), and Michael Marquardt (theymos). Donated fund=
s are managed by theymos.

Private Internet Access provides free hosting for the forum. Check them out=
 for anonymous VPN tunnels. They accept Bitcoin!

If you donate some BTC, you can get a special "Donator" title and a green "=
who's online" color. If you donate 1 BTC, you get VIP status and the abilit=
y to create a custom title for yourself. Both Donators and VIPs also get ac=
cess to an exclusive forum section. You must prior to donating if you want =
to take advantage of this offer: you will be given a unique donation addres=
s.

Big Thanx For Help situation and sent for our donate this right now
Thank you for your interest in donate!
we do and develop an interest for many people and the system in general, it=
 makes it all bolie popular and we try for you
if ever we need your help we hope you will be able to help us and send some=
 of your coins for us
we need money for maintenance and we invite you to support us and make a do=
nation to help us

We very much appreciate and thank you a lot
Quote
Return-Path: <activation@coinbase.com>
Received: from smtp01-forward-0.daemonmail.net (smtp01-forward-0.daemonmail.net [216.104.162.150]) by sm03.internetmailserver.net with SMTP;
   Tue, 29 Oct 2013 04:05:43 -0700
Received: from mxw02.daemonmail.net (unknown [216.104.161.12])
   by smtp01-forward-0.daemonmail.net (Postfix) with ESMTP id 2A7D181BB7
   for <*@appropriatesystems.com>; Tue, 29 Oct 2013 03:49:11 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
   by mxw02.daemonmail.net (Postfix) with ESMTP id 2D589282541
   for <*@garrettbattaglia.info>; Tue, 29 Oct 2013 03:49:11 -0700 (PDT)
X-Virus-Scanned: Debian amavisd-new at mxw02.daemonmail.net
X-Spam-Flag: NO
X-Spam-Score: -0.002
X-Spam-Level:
X-Spam-Status: No, score=-0.002 tagged_above=-20 required=4
   tests=[BAYES_05=-0.5, MISSING_MID=0.497, URIBL_BLOCKED=0.001]
   autolearn=no
Received: from mxw02.daemonmail.net ([127.0.0.1])
   by localhost (mxw02.daemonmail.net [127.0.0.1]) (amavisd-new, port 10024)
   with ESMTP id H0RToO-gmIJL for <*@garrettbattaglia.info>;
   Tue, 29 Oct 2013 03:49:05 -0700 (PDT)
Received: from smtp.2164.v.tld.pl (v2164.rev.tld.pl [195.149.231.64])
   by mxw02.daemonmail.net (Postfix) with ESMTP id C4B6028254B
   for <*@garrettbattaglia.info>; Tue, 29 Oct 2013 03:49:04 -0700 (PDT)
Received: (qmail 313 invoked by uid 2164007); 29 Oct 2013 10:49:02 -0000
X-clamdmail: clamdmail 0.18a
Received: from 89.223.47.197 (HELO home-91e15d0351.user.nevalink.net) (ewa.szymanska@fcmtravel.pl@89.223.47.197)
  by 195.149.231.64 with ESMTPA; 29 Oct 2013 10:49:02 -0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Activation your new account 2013
To: *@garrettbattaglia.info
From: activation@coinbase.com
Date: Tue, 29 Oct 2013 14:49:07 +0400
Reply-To: activation@coinbase.com
Return-receipt-to: activation@coinbase.com
X-Rcpt-To: <*@appropriatesystems.com>
Message-ID: <c7d000f84abb413d80215a33359b447a@com>
X-SmarterMail-Spam: SPF_Fail, SpamAssassin 9 [raw: 3], DK_None, DKIM_None
X-SmarterMail-TotalSpamWeight: 14

Activation your new account 2013

Here Yes

This individual invite for you


https://www.switchpoker.com/?rid=3D4145&link=3D7


The referral bonus will be added to your account automatically
Quote
Return-Path: <bonus@bitcoin.org>
Received: from smtp02-forward-0.daemonmail.net (smtp02-forward-0.daemonmail.net [216.104.163.150]) by sm03.internetmailserver.net with SMTP;
   Tue, 29 Oct 2013 06:13:44 -0700
Received: from mxw01.daemonmail.net (unknown [216.104.161.11])
   by smtp02-forward-0.daemonmail.net (Postfix) with ESMTP id 94E7081212
   for <*@appropriatesystems.com>; Tue, 29 Oct 2013 05:54:54 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
   by mxw01.daemonmail.net (Postfix) with ESMTP id 3CF29240951
   for <*@garrettbattaglia.info>; Tue, 29 Oct 2013 05:54:53 -0700 (PDT)
X-Virus-Scanned: Debian amavisd-new at mxw01.daemonmail.net
X-Spam-Flag: NO
X-Spam-Score: -1.889
X-Spam-Level:
X-Spam-Status: No, score=-1.889 tagged_above=-20 required=4
   tests=[BAYES_00=-1.9, T_MANY_HDRS_LCASE=0.01, URIBL_BLOCKED=0.001]
   autolearn=ham
Received: from mxw01.daemonmail.net ([127.0.0.1])
   by localhost (mxw01.daemonmail.net [127.0.0.1]) (amavisd-new, port 10024)
   with ESMTP id 6z3xe3NWF61J for <*@garrettbattaglia.info>;
   Tue, 29 Oct 2013 05:54:50 -0700 (PDT)
Received: from mail.qatar.net.qa (cactus4.qatar.net.qa [82.148.101.71])
   by mxw01.daemonmail.net (Postfix) with ESMTPS id 3785B240EAD
   for <*@garrettbattaglia.info>; Tue, 29 Oct 2013 05:54:49 -0700 (PDT)
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; CHARSET=US-ASCII
Received: from home-91e15d0351.user.nevalink.net ([89.223.47.197])
 by cactus4.qatar.net.qa
 (Oracle Communications Messaging Exchange Server 7u4-18.01 64bit (built Jul 15
 2010)) with ESMTPA id <0MVF00L3JKMOVQ10@cactus4.qatar.net.qa> for
 *@garrettbattaglia.info; Tue, 29 Oct 2013 15:50:36 +0300 (AST)
Message-id: <0MVF00LZLL0BVQ30@cactus4.qatar.net.qa>
Content-description: Mail message body
Subject: Bitcoin Your [Procedure Right Now]
To: *@garrettbattaglia.info
From: bonus@bitcoin.org
Date: Tue, 29 Oct 2013 16:54:51 +0400
Reply-to: bonus@bitcoin.org
Return-receipt-to: bonus@bitcoin.org
X-Rcpt-To: <*@appropriatesystems.com>
X-SmarterMail-Spam: SPF_None, SpamAssassin 0 [raw: 0], DK_None, DKIM_None
X-SmarterMail-TotalSpamWeight: 0

Bitcoin is a website in which you earn small amounts of Bitcoins in exchange for visiting websites for a designated period of time. You may be required to spend anywhere from one minute, up to five minutes or more on the sponsored website. You must spend the full amount of required time on the website in order to recieve payment.

N1

http://minefield.bitcoinlab.org/?r=tjG2tHzTPhhKmkjo

N2

http://www.bitcoinget.com/?r=1Akps1g2LETZ2SSB2HZKw5si46quj6WxH8

N3

http://satoshi36.com/ofn


Want more free bitcoins? Check out these site

N4

https://www.switchpoker.com/?rid=4145&link=7

Get Your Bitcoins Stable Bonus This
Start Right Now

it would seem that this is a poor phishing scam. it you go to where the message was received from daemonmail.net you get this
Quote

DaemonMail is a mail sorter and mail handler shared by several ISPs.

If you have reached this web page by examining headers found in an unwanted email, please email us the entire message: abuse@daemonmail.net. Be sure to include a full copy of the email headers. You will receive a prompt, personalized response.

Our AUP is provided below:

DaemonMail Acceptable Use Policy

These servers and hosted domains may not be the source, intermediary, or destination address involved in the transmission of junk email, nor may they be listed in any junk email message. The use of these servers to send or relay junk email is prohibited, and will result in a fine.

"Junk email" is defined as "any mass unsolicited or unwanted message in any medium." Violation will result in immediate termination of all services without refund. Fines and legal action may be imposed. Any customer who is repeatedly flamed/mail-bombed or attracts such behavior will be asked to leave.

Mailing list services are provided for use as discussion forums only, and may not be used to distribute unsolicited email. All users on a list must have personally subscribed to that list.
we could try to email abuse@daemonmail.net and see what happens.
waltermot321
Sr. Member
****
Offline Offline

Activity: 322


View Profile
October 29, 2013, 02:11:08 PM
 #7

I get all kinds of emails almost same like this but not from coinbase. So just don't fall into it Smiley

TheNewAnon135246
Legendary
*
Offline Offline

Activity: 1442



View Profile WWW
October 29, 2013, 03:07:32 PM
 #8

Well do that. These kinds of emails need to be stopped.
Luckily I'm not getting them.
[/quote]

Maybe sign him up on a few gay websites.

BitSend ◢◤Clients | Source
www.bitsend.info
█▄
█████▄
████████▄
███████████▄
██████████████
███████████▀
████████▀
█████▀
█▀












Segwit | Core 0.14 | Masternodes
XEVAN | DK3 | Electrum soon
Bitcore - BTX/BTC -Project












BSD -USDT | Bittrex | C.Gather | S.Exchange
Cryptopia | NovaExchange | Livecoin
Litebit.eu | Faucet | Bitsend Airdrop













████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████

████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████
gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 29, 2013, 03:29:42 PM
 #9

Well do that. These kinds of emails need to be stopped.
Luckily I'm not getting them.

Maybe sign him up on a few gay websites.
[/quote]

who?
Gemminyc
Full Member
***
Offline Offline

Activity: 158


View Profile
October 29, 2013, 03:36:01 PM
 #10

I only receiving Coinbase newsletters. I dont know what is inside becaue I delete these and I cant sign out for newsletters because I lost login info to Coinbase.
gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 29, 2013, 04:01:51 PM
 #11

I only receiving Coinbase newsletters. I dont know what is inside becaue I delete these and I cant sign out for newsletters because I lost login info to Coinbase.

do you have one that you can open. if you have it, can post the raw text (like i did above) of the message so i can look at it?

edit: talking about the newsletters
Mitchell
Staff
Legendary
*
Offline Offline

Activity: 1596


Verified awesomeness ✔


View Profile WWW
October 29, 2013, 04:05:35 PM
 #12

I only receiving Coinbase newsletters. I dont know what is inside becaue I delete these and I cant sign out for newsletters because I lost login info to Coinbase.

do you have one that you can open. if you have it, can post the raw text (like i did above) of the message so i can look at it?
I can give you a ton of e-mails:

Quote
Return-path: <activatie@coinbase.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Tue, 29 Oct 2013 12:24:01 +0000
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1Vb8L3-0002Ve-K9
   for admin@bitcoininformation.info; Tue, 29 Oct 2013 12:24:01 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=8.0 tests=RCVD_IN_DNSWL_BLOCKED,
   T_MANY_HDRS_LCASE,URIBL_BLOCKED autolearn=disabled version=3.3.1
Received: from cactus4.qatar.net.qa ([82.148.101.71] helo=mail.qatar.net.qa)
   by mail33.extendcp.com with esmtps (TLSv1:RC4-MD5:128)
   (Exim 4.80.1)
   id 1Vb8L3-0002Tk-Ff
   for admin@bitcoininformation.info; Tue, 29 Oct 2013 12:24:01 +0000
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; CHARSET=US-ASCII
Received: from home-91e15d0351.user.nevalink.net ([89.223.47.197])
 by cactus4.qatar.net.qa
 (Oracle Communications Messaging Exchange Server 7u4-18.01 64bit (built Jul 15
 2010)) with ESMTPA id <0MVF00BHXJ0XDHI0@cactus4.qatar.net.qa> for
 admin@bitcoininformation.info; Tue, 29 Oct 2013 15:19:48 +0300 (AST)
Message-id: <0MVF00BKZJKZDHM0@cactus4.qatar.net.qa>
Content-description: Mail message body
Subject: Activation account 2013
To: admin@bitcoininformation.info
From: activatie@coinbase.com
Date: Tue, 29 Oct 2013 16:24:03 +0400
Reply-to: activate@coinbase.com
Return-receipt-to: activate@coinbase.com

Activation new account 2013



This individual invite for you


https://www.switchpoker.com/?rid=4145&link=7


Yes


The referral bonus will be added to your account automatically

Quote
Return-path: <donate@coinbase.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Mon, 28 Oct 2013 07:44:46 +0000
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1VahVF-0005Qq-4B
   for admin@bitcoininformation.info; Mon, 28 Oct 2013 07:44:46 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level:
X-Spam-Status: No, score=0.1 required=8.0 tests=MISSING_MID,
   RCVD_IN_DNSWL_BLOCKED autolearn=disabled version=3.3.1
Received: from outbound-ss-391.hostmonster.com ([67.222.34.81])
   by mail33.extendcp.com with smtp (Exim 4.80.1)
   id 1VahVE-0005PS-QL
   for admin@bitcoininformation.info; Mon, 28 Oct 2013 07:44:45 +0000
Received: (qmail 8975 invoked by uid 0); 28 Oct 2013 07:43:11 -0000
Received: from unknown (HELO just86.justhost.com) (173.254.28.86)
  by oproxy4.mail.unifiedlayer.com with SMTP; 28 Oct 2013 07:43:11 -0000
Received: from [89.223.47.197] (port=3386 helo=home-91e15d0351.user.nevalink.net)
   by just86.justhost.com with esmtpa (Exim 4.80)
   (envelope-from <donate@coinbase.com>)
   id 1VahIP-0004ob-6i
   for admin@bitcoininformation.info; Mon, 28 Oct 2013 01:31:29 -0600
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Bitcoinyour order confirmation
To: admin@bitcoininformation.info
From: donate@coinbase.com
Date: Mon, 28 Oct 2013 11:31:31 +0400
Reply-To: donation@coinbase.com
Return-receipt-to: donation@coinbase.com
X-Identified-User: {3100:just86.justhost.com:chanaky1:rp-overseas.com} {sentby:smtp auth 89.223.47.197 authed with rp@rp-overseas.com}
Message-Id: <E1VahVF-0005Qq-4B@mail33.extendcp.co.uk>

Donate to the Bitcoin Forum

Bitcoin address:   1CAJwM4cwpyLdwWmvwgtmV9hWR3fnsuGyH

Litecoin address:   LaMjSwqKm57DHTXgBqGJxAcBXuoFB4taYu

The Bitcoin Forum is a website meant to host free discussion of Bitcoin and=
 related topics. It is operated as a service to the community, and all prof=
it is reinvested into the forum. It was started in 2009 by Satoshi Nakamoto=
, the original creator of Bitcoin. It is now managed by Malmi Martti (Siriu=
s), Stefan Thomas (justmoon), and Michael Marquardt (theymos). Donated fund=
s are managed by theymos.

Private Internet Access provides free hosting for the forum. Check them out=
 for anonymous VPN tunnels. They accept Bitcoin!

If you donate some BTC, you can get a special "Donator" title and a green "=
who's online" color. If you donate 1 BTC, you get VIP status and the abilit=
y to create a custom title for yourself. Both Donators and VIPs also get ac=
cess to an exclusive forum section. You must prior to donating if you want =
to take advantage of this offer: you will be given a unique donation addres=
s.

Big Thanx For Help situation and sent for our donate this right now
Thank you for your interest in donate!
we do and develop an interest for many people and the system in general, it=
 makes it all bolie popular and we try for you
if ever we need your help we hope you will be able to help us and send some=
 of your coins for us
we need money for maintenance and we invite you to support us and make a do=
nation to help us

We very much appreciate and thank you a lot

Quote
Return-path: <service@coinbase.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Mon, 21 Oct 2013 06:27:56 +0100
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1VY81z-0001ci-Op
   for admin@bitcoininformation.info; Mon, 21 Oct 2013 06:27:55 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level: *
X-Spam-Status: No, score=1.4 required=8.0 tests=MISSING_MID,
   RCVD_IN_DNSWL_BLOCKED,RDNS_NONE,URIBL_BLOCKED autolearn=disabled version=3.3.1
Received: from [62.213.95.168] (helo=www.yolochka.ru)
   by mail33.extendcp.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
   (Exim 4.80.1)
   id 1VY81z-0001bl-L4
   for admin@bitcoininformation.info; Mon, 21 Oct 2013 06:27:55 +0100
Received: from [89.223.47.197] (helo=[192.168.0.100])
   by www.yolochka.ru with esmtpa (Exim 4.66)
   (envelope-from <service@coinbase.com>)
   id 1VXkyP-000M0q-PD
   for admin@bitcoininformation.info; Sun, 20 Oct 2013 08:50:41 +0400
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Partner Welcome Switch Now 2013
To: admin@bitcoininformation.info
From: service@coinbase.com
Date: Sun, 20 Oct 2013 08:39:40 +0400
Reply-To: service@coinbase.com
Return-receipt-to: service@coinbase.com
Message-Id: <E1VY81z-0001ci-Op@mail33.extendcp.co.uk>

Welcome Switch Poker New Partner

Thank you =


Free Bonus

Now

Earn up to =E2=82=AC million

Refer friends

=E2=82=AC500 Race

Play and WIN!



https://www.switchpoker.com/?rid=3D4145

Special your link

Take Your Bonus Now

Quote
Return-path: <service@coinbase.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Sat, 19 Oct 2013 03:33:48 +0100
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1VXMMN-0000ci-WC
   for admin@bitcoininformation.info; Sat, 19 Oct 2013 03:33:48 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level:
X-Spam-Status: No, score=0.1 required=8.0 tests=MISSING_MID,
   RCVD_IN_DNSWL_BLOCKED,URIBL_BLOCKED autolearn=disabled version=3.3.1
Received: from mailhosting3.netcenter.net.vn ([221.132.39.173])
   by mail33.extendcp.com with smtp (Exim 4.80.1)
   id 1VXMMN-0000bg-Jd
   for admin@bitcoininformation.info; Sat, 19 Oct 2013 03:33:47 +0100
Received: (qmail 10308 invoked by uid 89); 19 Oct 2013 02:31:01 -0000
Received: from unknown (HELO ?192.168.0.100?) (89.223.47.197)
  by netcenter.net.vn with SMTP; 19 Oct 2013 02:31:01 -0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Bitcoin 2013 Revolutionary Money Making! Build your own Cloud Miner! Actual
 Now
To: admin@bitcoininformation.info
From: service@coinbase.com
Date: Sat, 19 Oct 2013 06:19:57 +0400
Reply-To: service@coinbase.com
Return-receipt-to: service@coinbase.com
Message-Id: <E1VXMMN-0000ci-WC@mail33.extendcp.co.uk>

Bitcoin 2013 Revolutionary MoneyMaking! Build your own Cloud Miner!

Funding & Market

No trade fee. Live Market Quotes, Instant Trades, Trade 24/7/365

This Special Bonus

Come and Get 1 Coin For You Now



Referral invite for you


https://cex.io/r/1/VLADIMIR/0/


The referral bonus will be added to your account automatically

          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
.
|
.
|
          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
unthy
cableiso
Member
**
Offline Offline

Activity: 89


View Profile
October 29, 2013, 04:43:16 PM
 #13

So did the emails only start after the hack?  Mine did, and are sent to an email I only use for this forum so it seems related.  Might be a path back to the hackers, by determining who they sold lists to.
gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 29, 2013, 04:58:19 PM
 #14

So did the emails only start after the hack?  Mine did, and are sent to an email I only use for this forum so it seems related.  Might be a path back to the hackers, by determining who they sold lists to.
it seems to be linked to the hack. the "person" this seems to be linked to http://home-91e15d0351.user.nevalink.net/
ekiro
Member
**
Offline Offline

Activity: 98


View Profile
October 29, 2013, 11:24:07 PM
 #15

I'm not pleased with the amount of sketch activity about bitcoins. Just gives it a bad rep. So uncool when we all want for it to grow.

I say we get the US's backing and have them bomb all threats.
Mitchell
Staff
Legendary
*
Offline Offline

Activity: 1596


Verified awesomeness ✔


View Profile WWW
October 30, 2013, 07:17:33 AM
 #16

More e-mails:

Quote
Return-path: <services@coinbase.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Wed, 30 Oct 2013 00:53:06 +0000
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1VbK1w-0001pG-SK
   for admin@bitcoininformation.info; Wed, 30 Oct 2013 00:53:06 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level: *
X-Spam-Status: No, score=1.4 required=8.0 tests=MISSING_MID,
   RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_BLOCKED,URIBL_BLOCKED autolearn=disabled
   version=3.3.1
Received: from server236.managedns.org ([216.185.43.236] helo=mirackleadmin.managedns.org)
   by mail33.extendcp.com with esmtp (Exim 4.80.1)
   id 1VbK1w-0001nm-IG
   for admin@bitcoininformation.info; Wed, 30 Oct 2013 00:53:04 +0000
Received: from home-91e15d0351.user.nevalink.net (UnknownHost [89.223.47.197]) by mirackleadmin.managedns.org with SMTP;
   Tue, 29 Oct 2013 20:53:00 -0400
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Welcome Bitcoins Gifts Starts Yes
To: admin@bitcoininformation.info
From: services@coinbase.com
Date: Wed, 30 Oct 2013 04:52:50 +0400
Reply-To: servic@coinbase.com
Return-receipt-to: servic@coinbase.com
Message-Id: <E1VbK1w-0001pG-SK@mail33.extendcp.co.uk>



Welcome Bitcoins Gifts Starts Yes




https://coinad.com/?r=3DGMNK9RCQ3D9W1TT




Here individual for you

Quote
Return-path: <donation@coindesk.com>
Envelope-to: admin@bitcoininformation.info
Delivery-date: Wed, 30 Oct 2013 00:49:18 +0000
Received: from mail by mail33.extendcp.com with spamvirus-scanned (Exim 4.80.1)
   id 1VbJyH-00075z-Vb
   for admin@bitcoininformation.info; Wed, 30 Oct 2013 00:49:18 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
   mail33.extendcp.co.uk
X-Spam-Level: *
X-Spam-Status: No, score=1.4 required=8.0 tests=MISSING_MID,
   RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_BLOCKED autolearn=disabled version=3.3.1
Received: from showa.websitewelcome.com ([184.173.236.60])
   by mail33.extendcp.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
   (Exim 4.80.1)
   id 1VbJyH-00074x-Qg
   for admin@bitcoininformation.info; Wed, 30 Oct 2013 00:49:17 +0000
Received: from [89.223.47.197] (port=3608 helo=home-91e15d0351.user.nevalink.net)
   by showa.websitewelcome.com with esmtpa (Exim 4.80)
   (envelope-from <donation@coindesk.com>)
   id 1VbJIS-00006H-LC
   for admin@bitcoininformation.info; Tue, 29 Oct 2013 19:06:04 -0500
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Free Edward Snowden Bitcoiners donate to WikiLeaks to support Edward Snowden
To: admin@bitcoininformation.info
From: donation@coindesk.com
Date: Wed, 30 Oct 2013 04:06:08 +0400
Reply-To: donation@coindesk.com
Return-receipt-to: donation@coindesk.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - showa.websitewelcome.com
X-AntiAbuse: Original Domain - bitcoininformation.info
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - coindesk.com
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (home-91e15d0351.user.nevalink.net) [89.223.47.197]:3608
X-Source-Auth: account.khi@cilgroup.net
X-Email-Count: 212
X-Source-Cap: Y2lsZ3JvdXA7b25lbWFuO3Nob3dhLndlYnNpdGV3ZWxjb21lLmNvbQ==
Message-Id: <E1VbJyH-00075z-Vb@mail33.extendcp.co.uk>

Free Edward Snowden WikiLeaks

WikiLeaks raises $12000 in Bitcoin for Edward Snowden's defense

Former CIA technical worker Edward Snowden, who leaked sensitive. Snowden r=
eportedly made donations of $50 over please

Bitcoiners donate to WikiLeaks to support Edward Snowden

Donation Your Yes Bitcoin: 1BWLsc64VFaLB5iz6Dm2qnqghGXHUe9ffA

Thanx support our future


They aren't even trying anymore.

          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
.
|
.
|
          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
unthy
rampalija
Member
**
Offline Offline

Activity: 112


View Profile
October 30, 2013, 10:28:19 AM
 #17

I guess it is a trick to take your money
gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 30, 2013, 12:29:25 PM
 #18

I guess it is a trick to take your money

this is a poor phishing attempt. do not fall for it.
rigel
Legendary
*
Offline Offline

Activity: 1081


Thank God I'm an atheist


View Profile
October 30, 2013, 12:41:17 PM
 #19

These messages fail SPF test: http://www.openspf.org/Project_Overview

Your mailserver should perform this test automatically and reject them
gwoplock
Full Member
***
Offline Offline

Activity: 134



View Profile
October 30, 2013, 01:08:58 PM
 #20

These messages fail SPF test: http://www.openspf.org/Project_Overview

Your mailserver should perform this test automatically and reject them

some don't fail. (from what i posted above)
Quote
X-SmarterMail-Spam: SPF_None, SpamAssassin 0 [raw: 0], DK_None, DKIM_None
also spf alone is not going to kick the email out.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!