Google
Edit File: 1770722145.M570141P2421433.server-619288.prediksijaya.com,S=12156,W=12355:2,a
Return-Path: <info@denahamrah.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id U62/IWETi2m58iQAf7/9AQ (envelope-from <info@denahamrah.com>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 10 Feb 2026 18:15:45 +0700 Return-path: <info@denahamrah.com> Envelope-to: winbr@ponjosonek.com Delivery-date: Tue, 10 Feb 2026 18:15:45 +0700 Received: from mail.zeuscompany.ir ([91.223.116.146]:56631) by server-619288.prediksijaya.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.1) (envelope-from <info@denahamrah.com>) id 1vpliW-0000000A9ov-2ulQ for winbr@ponjosonek.com; Tue, 10 Feb 2026 18:15:44 +0700 DKIM-Signature: v=1; c=relaxed/relaxed; h=reply-to:from:to:subject:date:message-id:mime-version:content-type:content-transfer-encoding; d=denahamrah.com; s=default; a=rsa-sha256; bh=uygEzwI7pS4XtZLCOJxgE51Q+iAZzB6n/9VLfw0frDo=; b=spkiDOZa7HLMOjKCO1kQJaWGdOzT1oCPuZMN3e98BpP0vcz714pTkYtfwQnRxoWw4 5xzY0CJ0RpZJfn6YsX+MsGO9Kb8c9tfhHc5AtxYIiqHNT4h6ZMmyICEceSUiycxDocI n4VRODdTSh21gdTo/9GO/7CeOz3SaPcIkMCJMp0xWJ6VDmE9w0wOgSVv80cYfhcFnLZ FeBkgoyCaAhF1k/Bg0hYvwB+9VNJZJ7QfykDs+zTr9NK3LLq3z+SH9fjTS7+iT7hZB+ vI3PMwXdRxvWxlvhoNKblzYGZnLCNEqfe06WLdMO1liZcpWcQY9KdPtZGO9kawX7EWZ fEQTVXFxw==; Received: from [213.209.159.120] ([213.209.159.120]) by home with MailEnable ESMTPSA (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384); Tue, 10 Feb 2026 14:19:48 +0330 Reply-To: blockchainwalletbtc2022@gmail.com From: Blockchain.com <newsletter@email.blockchain.com> To: winbr@ponjosonek.com Date: 10 Feb 2026 02:49:48 -0800 Message-ID: <20260210024948.14714B420C4D931B@email.blockchain.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=11.5 X-Spam-Score: 115 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: # Please type your reply above this line # Hi there, Content analysis details: (11.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [91.223.116.146 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [91.223.116.146 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [91.223.116.146 listed in bl.score.senderscore.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [91.223.116.146 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: denahamrah.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 REPTO_419_FRAUD_GM Reply-To is known advance fee fraud collector mailbox 7.5 SNB_HASHBL_FREEMAIL Message contains email address found on SNB Freemail HashBL [blockchainwalletbtc2022[at]gmail.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [blockchainwalletbtc2022(at)gmail.com] 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 LOTS_OF_MONEY Huge... sums of money 1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? X-Spam-Flag: YES Subject: Re: A PAYMENT WITH BITCOIN WAS SENT TO YOUR EMAIL. CONFIRM <!DOCTYPE HTML> <html><head><title></title> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> </head> <body style=3D"margin: 0.4em;"> <p> <span style=3D'color: rgb(181, 181, 181); text-transform: none; text-indent= : 0px; letter-spacing: normal; font-family: "lucida grande", verdana, arial= , sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-s= pacing: 0px; float: none; display: inline !important; white-space: normal; = orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-l= igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px= ; text-decoration-thickness: initial;=20 text-decoration-style: initial; text-decoration-color: initial;'># Please t= ype your reply above this line #</span><br><br><br>Hi there,<br><br><br></p= ><p> </p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">We are reaching out from the Bloc= kchain Support Team, working in close conjunction with our Redirection Depa= rtment.</p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">During a routine scan of the Bloc= kchain Crypto Explorer, our systems flagged an unusual, high-value transact= ion linked to your email address: winbr@ponjosonek.com</p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">Specifically, we detected a trans= action totaling<span> </span><strong style=3D"font-weight: 600; box-si= zing: border-box;">$8,567,356.46</strong><span> </span>that was initia= ted from a PayPal source, intended for conversion into Bitcoin (BTC) and ro= uted directly to your email for processing. This is a substantial sum, and = we understand you may not be immediately aware of its status.</p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">As funds sent to an email identif= ier, especially those converted to cryptocurrency, require a specific and s= ecure process for final delivery, these funds are currently held in a pendi= ng state within our system. To successfully complete this transfer and ensu= re the secure delivery of your Bitcoin, we require a verifiable and<span>&n= bsp;</span><strong style=3D"font-weight: 600; box-sizing: border-box;">redi= rectable cryptocurrency wallet address</strong> <span> </span>from you.</p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">Once we receive your preferred Bi= tcoin wallet address, our Redirection Department will initiate the transfer= from the pending email-linked account directly to your provided wallet.</p= > <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">Please reply to this email with t= he Bitcoin (BTC) wallet address to which you would like these funds redirec= ted. For security purposes, please double-check the wallet address carefull= y before sending to ensure accuracy.</p> <p style=3D"color: rgb(90, 90, 90); text-transform: none; text-indent: 0px;= letter-spacing: normal; font-family: Arial, sans-serif; font-size: 16px; f= ont-style: normal; font-weight: 400; margin-top: 0px; margin-bottom: 1rem; = word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2;= widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial;">We look forward to assisting you = in securing your funds.</p><p><br><br></p><p>Best,<br><br>Blockchain Wallet= <br><u><font color=3D"#0000ff" face=3D"Arial" size=3D"2">Redirectable Depar= tment Support team</font></u></p> </body></html>