MOON
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
System: Linux csr818.wilogic.com 2.6.18-419.el5xen #1 SMP Fri Feb 24 22:50:37 UTC 2017 x86_64
User: digitals (531)
PHP: 5.4.45
Disabled: NONE
Upload Files
File: /home2/digitals/mail/new/1708841356.H512878P12213.csr818.wilogic.com,S=3576
Return-path: <support@mail.com>
Envelope-to: sales@digitalspackle.com
Delivery-date: Sat, 24 Feb 2024 22:09:16 -0800
Received: from [195.39.151.85] (port=40501 helo=mail.nesmgroup.com)
	by csr818.wilogic.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.87)
	(envelope-from <support@mail.com>)
	id 1re7hK-00037y-1O
	for sales@digitalspackle.com; Sat, 24 Feb 2024 22:09:16 -0800
Received: from localhost (localhost [127.0.0.1])
	by mail.nesmgroup.com (Postfix) with ESMTP id 61FE42471FF;
	Fri, 23 Feb 2024 22:35:31 +0300 (AST)
Received: from mail.nesmgroup.com ([127.0.0.1])
	by localhost (mail.nesmgroup.com [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id EWadYnxZ_a8d; Fri, 23 Feb 2024 22:35:24 +0300 (AST)
Received: from localhost (localhost [127.0.0.1])
	by mail.nesmgroup.com (Postfix) with ESMTP id 82F083E1BAA;
	Fri, 23 Feb 2024 21:02:09 +0300 (AST)
X-Virus-Scanned: amavisd-new at nesmgroup.com
Received: from mail.nesmgroup.com ([127.0.0.1])
	by localhost (mail.nesmgroup.com [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id zWu9qpYIGvMv; Fri, 23 Feb 2024 21:02:08 +0300 (AST)
Received: from [23.172.112.70] (unknown [23.172.112.70])
	by mail.nesmgroup.com (Postfix) with ESMTPSA id 5DFDB3014CD;
	Fri, 23 Feb 2024 20:35:34 +0300 (AST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <support@mail.com>
From: "Bitcoin Admin" <support@mail.com>
Date: Fri, 23 Feb 2024 09:55:58 -0800
Message-Id: <20240223173535.5DFDB3014CD@mail.nesmgroup.com>
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "csr818.wilogic.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Hello Dave Palmer, we have deposited the 39 BTC which amount
    to ( $1,990,170.16 USD ) as you requested into your bitcoin portfolio at
   www.koinrise.com Customer Id: 33410064 , Password: KLY23JH18 [...] 
 
 Content analysis details:   (11.9 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: koinrise.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [195.39.151.85 listed in psbl.surriel.com]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [195.39.151.85 listed in bl.score.senderscore.com]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URIs: koinrise.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Bitcoin Deposit
X-From-Rewrite: unmodified, forwarded message

Hello Dave Palmer, we have deposited the 39 BTC which amount to ( $1,990,17=
0.16 USD ) as you requested into your bitcoin portfolio at www.koinrise.com=
 Customer Id: 33410064 , Password: KLY23JH18