First one I see about cryptocurrency.

This one has a funny email which mispells the word "coin"

alerts@conbase.com

What I find funny is that they removed the letter 'i' which transforms the word "coin" into "con"... artist, I guess. Ha! Ha! I find that funny.

The URL uses was a funny super long thing. Not too sure what it does I did not try it. Something about you confirming your account. Maybe a form asking you for your credential allowing them to then access your cryptocurrency account.

https://x.co/C01Nbas31mConfirm%20Account%20Now%3C/a%3E%3C/b%3E%3Cbr%3E%0A%09%09%3Cbr%3E%0A%09%09We%20apologize%20for%20any%20inconveniences%20caused.%3Cbr%3E%0A%09%09%3Ci%3E%3Cbr%3E%0A%09%09Thanks%20for%20using%20Coinbase%21%3C/i%3E%3Cbr%3E%0A%09%09%3Cbr%3E%0A%09%09%3Cbr%3E%0A%09%09Questions?%C2%A0Visit%20our%0A%09%09%3Ca%20href=

The letter seems to say that's what happens.

Return-Path: <SRS0+9Q1F=ER=conbase.com=alerts@m2osw.com>
X-Original-To: ALEXIS.WILKE@M2OSW.COM
Delivered-To: alexis@m2osw.com
X-Greylist: delayed 8932 seconds by postgrey-1.35 at m2osw.com; Mon, 22 Jan 2018 20:42:04 UTC
DMARC-Filter: OpenDMARC Filter v1.3.1 m2osw.com E0A634091E
Authentication-Results: mail.m2osw.com; dmarc=none header.from=conbase.com
Received: from panthur.iproperty.com.au (panthur.iproperty.com.au [101.0.108.186])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (No client certificate requested)
    by m2osw.com (Postfix) with ESMTPS id E0A634091E
    for <ALEXIS.WILKE@M2OSW.COM>; Mon, 22 Jan 2018 20:42:04 +0000 (UTC)
Received: from [216.87.168.59] (port=53493)
    by panthur.iproperty.com.au with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
    (Exim 4.89_1)
    (envelope-from <alerts@conbase.com>)
    id 1edgZf-002iXz-5C; Tue, 23 Jan 2018 05:12:03 +1100
Content-Type: multipart/alternative; boundary="===============1283663185=="
MIME-Version: 1.0
Subject: Confirm your Coinbase account
To: you <alerts@conbase.com>
From: "Coinbase" <alerts@conbase.com>
Date: Mon, 22 Jan 2018 13:11:36 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - panthur.iproperty.com.au
X-AntiAbuse: Original Domain - m2osw.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - conbase.com
X-Get-Message-Sender-Via: panthur.iproperty.com.au: authenticated_id:
                          maree.doherty@professionals.com.au
X-Authenticated-Sender: panthur.iproperty.com.au: maree.doherty@professionals.com.au
X-Source:
X-Source-Args:
X-Source-Dir:

Confirm your Coinbase account


Your Coinbase account could not be confirmed. You are required to confirm your account immediately.

Click on the button provided below:

customer support site. Don't reply to this email. It was automatically generated.



You have received this business communication as part of our efforts to fulfill your request or service your account. You may receive this and other business communications from us even if you have opted out of marketing messages.