Email Body (BCC’d to multiple addresses):
Hello Dave Franklin, we have deposited the 20 BTC which amount to ($837,210=
.93 USD) as you requested into your bitcoin portfolio at www.orbitcoin.net =
Customer Id: 19776188, Password: TGG3423KY
Scam Number:
Domain Used: orbitcoin.net, sharenpick.com (Sending domain, SPF verified IP)
Extra Info:
The orbitcoin page is a pretty solid looking phishing page. If you log in with the provided credentials it says your balance is 20 BTC, then has you set a new password. It then asks you for a phone number for voice verification. Unfortunately I have a busy day ahead so I am not willing to see where the next step leads today 