False admin mailbox size account phish

Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Sun, 08 Dec 2019 21:23:07 -0700

Received: from [45.128.223.91] (port=49781 helo=emailservice.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.92.3 (FreeBSD))

(envelope-from )

id 1ieAMX-000Dqe-9i

for sales@nk.ca; Sun, 08 Dec 2019 21:09:38 -0700

From: Email Administrator

To: sales@nk.ca

Subject: URGENT!!! Your Email Will Be Suspended

Date: 8 Dec 2019 20:09:17 -0800

Message-ID: <20191208200917.10F4D4870565DDA0@emailservice.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.5

X-Spam_score_int: 155

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day,sales@nk.ca 1969MB 2000 MB Your account will be Blocked

due to system error CODE: DA2507LU236 .



Content analysis details: (15.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: nk.ca]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.128.223.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in

dnsbl.ahbl.org

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

1.0 RCVD_IN_WSFF RBL: Received via a relay in

will-spam-for-food.eu.org

[45.128.223.91 listed in will-spam-for-food.eu.org]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[45.128.223.91 listed in bb.barracudacentral.org]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.9 FSL_BULK_SIG Bulk signature with no Unsubscribe

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML

only

Subject: {SPAM?} URGENT!!! Your Email Will Be Suspended

X-Antivirus: AVG (VPS 191208-0, 12/08/2019), Inbound message

X-Antivirus-Status: Clean












3, 33, 33); font-size: 15px;">
1" id=3D"yiv8126916348x_ecxyiv2486292201yui_3_16_0_1_1409874957895_2912" st=

yle=3D"line-height: 22px; font-size: 12pt;">Good da=

y,sales@nk.ca





v2486292201yui_3_16_0_1_1409874957895_2893" style=3D"color: rgb(68, 68, 68)=

; font-size: 24px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">


v2486292201yui_3_16_0_1_1409874957895_2892" style=3D"width: 293px; line-hei=

ght: 21px;">


86292201yui_3_16_0_1_1409874957895_2891">








r>

6348x_ecxyiv2486292201yui_3_16_0_1_1409874957895_2911" style=3D"background:=

rgb(255, 204, 0); border-color: black rgb(240, 240, 240) black black; padd=

ing: 0in; width: 131.25pt; border-top-width: 1pt; border-bottom-width: 1pt;=

border-left-width: 1pt; border-top-style: solid; border-bottom-style: soli=

d; border-left-style: solid;">


2486292201yui_3_16_0_1_1409874957895_2926" style=3D"color: rgb(34, 34, 34);=

line-height: 22px; font-family: Tahoma, sans-serif; font-size: 12pt;">1969=

MB

348x_ecxyiv2486292201yui_3_16_0_1_1409874957895_2924" style=3D"border-color=

: black black black rgb(240, 240, 240); padding: 0in; width: 18.75pt; borde=

r-top-width: 1pt; border-right-width: 1pt; border-bottom-width: 1pt; border=

-top-style: solid; border-right-style: solid; border-bottom-style: solid; b=

ackground-color: transparent;"> 

_16_0_1_1410448463373_1911" valign=3D"top" style=3D"background: 0px 50%; pa=

dding: 0in; border: rgb(240, 240, 240);"> 

_16_0_1_1410448463373_1885" style=3D"background: 0px 50%; padding: 0in; bor=

der: rgb(240, 240, 240);">
=3D"yiv8126916348x_ecxyui_3_16_0_1_1410448463373_1884">
26916348x_ecxyiv2486292201" id=3D"yiv8126916348x_ecxyui_3_16_0_1_1410448463=

373_1886" style=3D"color: rgb(34, 34, 34); line-height: 22px; font-family: =

Tahoma, sans-serif; font-size: 12pt;">2000



_3_16_0_1_1410448463373_1913" style=3D"color: rgb(34, 34, 34); line-height:=

22px; font-family: Tahoma, sans-serif; font-size: 12pt;">MB





784829820_23427" style=3D"color: rgb(33, 33, 33); font-size: 15px;"> <=

/div>


784829820_23426" style=3D"color: rgb(68, 68, 68); font-size: 24px;">
id=3D"yui_3_16_0_ym19_1_1470784829820_23425">


7_5634 yiv8126916348x_ecxyiv3723218874yui_3_13_0_1_1396232738906_3256 yiv81=

26916348x_ecxyiv3723218874yui_3_13_0_1_1397165451840_2800" id=3D"yiv8126916=

348x_ecxyiv3723218874yui_3_13_0_ym1_1_1395229056957_2565" style=3D"color: r=

gb(69, 69, 69); font-family: Corbel; font-size: 12pt;">Your account will be=

Blocked due to system error CODE:



7_5635 yiv8126916348x_ecxyiv3723218874yui_3_13_0_1_1396232738906_3257 yiv81=

26916348x_ecxyiv3723218874yui_3_13_0_1_1397165451840_2801" id=3D"yiv8126916=

348x_ecxyiv3723218874yui_3_13_0_ym1_1_1395231935017_5672" style=3D"color: r=

gb(255, 0, 0); font-family: Arial; font-size: 12pt; font-weight: bold;">DA2=

507LU236



7_5636 yiv8126916348x_ecxyiv3723218874yui_3_13_0_1_1396232738906_3258 yiv81=

26916348x_ecxyiv3723218874yui_3_13_0_1_1397165451840_2802" id=3D"yiv8126916=

348x_ecxyiv3723218874yui_3_13_0_ym1_1_13952" style=3D"color: rgb(69, 69, 69=

); font-family: Corbel; font-size: 12pt;">.



784829820_23424" style=3D"color: rgb(68, 68, 68); font-size: 24px;">
d=3D"yui_3_16_0_ym19_1_1470784829820_23423" style=3D"font-size: 14px;">Your=

e-mail account is running on a low storage space, 
126916348currentHitHighlight" id=3D"yiv81269163480.7796502865945156">verify=

 your account now to increase storage space



784829820_23422" style=3D"color: rgb(68, 68, 68); font-size: 24px;">
d=3D"yui_3_16_0_ym19_1_1470784829820_23421" style=3D"font-size: 14px;">othe=

r wise your
 account shall be l=

ocked out.
=



arget=3D"_blank" rel=3D"nofollow">







784829820_23420" style=3D"color: rgb(68, 68, 68); font-size: 24px;"> <=

/div>


784829820_23419" style=3D"color: rgb(68, 68, 68); font-size: 24px;">
d=3D"yui_3_16_0_ym19_1_1470784829820_23418" color=3D"#4d4d4d" size=3D"3">
trong id=3D"yui_3_16_0_ym19_1_1470784829820_23417">
_1_1470784829820_23416">NOTICE:
 



784829820_23414" style=3D"color: rgb(68, 68, 68); font-size: 24px;">
d=3D"yui_3_16_0_ym19_1_1470784829820_23415" color=3D"#4d4d4d" size=3D"3">Fa=

ilure to 
600312202810339">verify
 your e-mail account shall result to acc=

ount lock out.



784829820_23406" style=3D"color: rgb(68, 68, 68); font-size: 24px;"> <=

/div>


486292201yui_3_16_0_1_1409874957895_2898" style=3D"color: rgb(68, 68, 68); =

font-size: 24px;">
line-height: 22px; font-size: 12pt;">Thanks,=




486292201yui_3_16_0_1_1409874957895_2900" style=3D"color: rgb(68, 68, 68); =

font-size: 24px;">
8126916348x_ecxyiv2486292201yui_3_16_0_1_1409874957895_2901" style=3D"line-=

height: 22px; font-size: 12pt;">Account Service
nt>


More bitcoin porn blackmail phishing

Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Sun, 08 Dec 2019 18:00:55 -0700

Received: from mx.thranite.disspreading.monster ([206.189.119.111]:57418)

by doctor.nl2k.ab.ca with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256)

(Exim 4.92.3 (FreeBSD))

(envelope-from )

id 1ie7Nh-000Frp-Hc

for sales@nk.ca; Sun, 08 Dec 2019 17:58:48 -0700

Received: from mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1])

by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPv40XM2z22Jh

for ; Mon, 9 Dec 2019 00:58:08 +0000 (UTC)

Authentication-Results: mx.thranite.disspreading.monster (amavisd-new);

dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"

header.d=thranite.disspreading.monster

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

thranite.disspreading.monster; h=content-type:content-type

:mime-version:message-id:x-mailer:user-agent:reply-to

:list-unsubscribe:subject:subject:to:from:from:date:date; s=

dkim; t=1575853087; x=1578445088; bh=+u/4Cgh2FS1oc3x04D0aDBcxt9k

0uklME67rf1/PhdQ=; b=gk5tm8Er4B8Xc6LP9uW9TfIHtt9lRbmegcw7L+hx4/r

CgRpRYU+9z0WoU9VP/TNoIlesB96/G+oPMjBgWmVCAsd2d4cBslwtiJ5tgnRU9Qm

JgH5W6Nlijj8K5SdLVmhy8Ds3hmcALGd6dKAfHDUm7keUskL78VYRbTJtZ/Gqd+Y

=

X-Virus-Scanned: Debian amavisd-new at mx.thranite.disspreading.monster

Received: from mx.thranite.disspreading.monster ([127.0.0.1])

by mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id G0fzn4_w97o9 for ;

Mon, 9 Dec 2019 00:58:07 +0000 (UTC)

Received: from [127.0.0.1] (mx.thranite.disspreading.monster [127.0.0.1])

by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPqN4tmmz221R

for ; Mon, 9 Dec 2019 00:54:56 +0000 (UTC)

Date: Mon, 9 Dec 2019 00:54:55 +0000

From: =?UTF-8?Q?=CE=B1nonymous=20h=CE=B1cker?=

To: sales@nk.ca

Subject: =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=

List-Unsubscribe:

Reply-To:

User-Agent: CodeIgniter

X-Sender: gonzalobetz@thranite.disspreading.monster

X-Mailer: CodeIgniter

X-Priority: 3 (Normal)

Message-ID: <5ded9b605211d@thranite.disspreading.monster>

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="B_ALT_5ded9b605213d"

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FINAL WARNING: sales@nk.ca! You have the last chance to save

your social life - I am not kidding!! I give you the lαst 72 houɼs to mαke

the pαyʍent before I seɳd the video with ur mαsturbatίoɳ to all your

friends and associates.



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: nk.ca]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[206.189.119.111 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in

dnsbl.ahbl.org

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[206.189.119.111 listed in psbl.surriel.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in

will-spam-for-food.eu.org

[206.189.119.111 listed in will-spam-for-food.eu.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.0 SPF_PASS SPF: sender matches SPF record

2.3 MANGLED_LIST BODY: mangled list

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

2.3 MANGLED_VIDEO BODY: mangled video(s)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FROM_FMBLA_NEWDOM From domain was registered in last 7 days

Subject: {SPAM?} =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=

X-Antivirus: AVG (VPS 191208-0, 12/08/2019), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.

Your email application may not support this format.



--B_ALT_5ded9b605213d

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



FINAL WARNING: sales@nk.ca!



You have the last chance to save your social life - I am not kidding!!



I give you the lαst 72 houɼs to mαke the pαyʍent before I seɳd the

video with ur mαsturbatίoɳ to all your friends and associates.



The last time you visited a pornographic website with young teenagers, you

downloaded and automatically installed spying software that I created.



My program has turned on your cαmera and recorded the act of ur

mαsturbatίoɳ and the video you were watching while mαsturbating.



My software also downloaded email contact list and a list of your Facebook

friends from your device.



I have the Sales.mp4 video file with ur mαsturbatίoɳ and a file with all

your contacts on my hard drive.



Your fantasies are far beyond the normal!





If you want me to delete both files and keep your secret, you must seɳd me

the Bitcoin pαyʍent.

I give you lαst 72 houɼs to trαnsfer the funds..



If you don't know how to pαy with Bitcoin, visit Google and search - how to

buy Bitcoin (BTC).


Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin

and seɳd it to my address.

Only then I will leɑve you ɑlone!



At anycoindirect you can buy Bitcoin instantly with SEPA, Giropαy, EPS,

Mybank, Sofort, credit cards or Bancontract.





Here are the pαyʍent details:





******************************************

Seɳd 2,000 USD = 0.2670798 BTC

to this Bitcoin address immediately:



38hrB7FHvyLKJ7o5L

++ ++

Z89S3dL4uy5KgX5DP



(Copy & Ƿαste - it's case sensitive - and combine both lines into one

single line - my bitcoin address)

******************************************



1 BTC = 7,530 USD right now, so seɳd - 0.2670798 BTC to my Bitcoin wallet.





Do not try to cheat me!

As soon as you open this Email I will be notified you opened it.

I am monitoring all actions on your device..





This Bitcoin address is linked to you only, so I will know immediately when

you seɳd the correct amount.

When you pαy in full, I will remove both files (ur mαsturbation video and

your contact lists) and I will deactivate my sneaky program.



Changing your pass will not help you, I will still have access to your

device remotely.



If you choose not to seɳd me the Bitcoin trαnsfer...

I will seɳd ur mαsturbation video to all your friends and associates from

your contact lists that I downloaded from your device.

Your family members will receive it as well.

You will regret it, trust me.





Here are the pαyʍent details again:



******************************************

Seɳd 2,000 USD = 0.2670798 BTC

to this Bitcoin address immediately:



38hrB7FHvyLKJ7o5L

++ ++

Z89S3dL4uy5KgX5DP



(Copy & Ƿαste - it's case sensitive - and combine both lines into one

single line - my bitcoin address)

******************************************



You can visit the police but they will not solve your real problem.

My program will still be installed on your device and I still will own ur

mαsturbatioɳ videos.

Police will not catch me anyway. I know what I am doing.

I do not live in your country and I know how to stay anonymous.



Don't ever try to deceive me - I will know it. My program is recording all

the websites you visit.

If you try to trick me - I will seɳd this ugly video to everyone you know,

including your family members.



Don't forget the potential shame - your life can be a disaster!



I am waiting for your Bitcoin pαyʍent.

You have 72 houɼs left.



Anonymous Hacker



P.S. If you need more time to pɑy, open your notepad on your device and

write '48h more'. Only this way you can contact me. I will consider giving

you more time before I release the video, but only when I see that you are

really struggling to buy btc. I know you can afford it - so do not try to

trick me!





--B_ALT_5ded9b605213d

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=3C=21DOCTYPE HTML PUBLIC =22-//W3C//DTD XHTML 1.0 Transitional //EN=22 =22=

http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd=22=3E

=3Chtml xmlns=3D=22http://www.w3.org/1999/xhtml=22 xmlns:v=3D=22urn:schemas=

-microsoft-com:vml=22 xmlns:o=3D=22urn:schemas-microsoft-com:office:office=

=22=3E

=3Chead=3E

=3Cmeta http-equiv=3D=22Content-Type=22 content=3D=22text/html=3B charset=

=3Dutf-8=22=3E

=3Cmeta name=3D=22viewport=22 content=3D=22width=3Ddevice-width=22=3E

=3C=21--=5Bif =21mso=5D=3E=3C=21--=3E=3Cmeta http-equiv=3D=22X-UA-Compatibl=

e=22 content=3D=22IE=3Dedge=22=3E=3C=21--=3C=21=5Bendif=5D--=3E

=3C=21--=5Bif =21mso=5D=3E=3C=21-- --=3E

=3C=21--=3C=21=5Bendif=5D--=3E

=3Cstyle type=3D=22text/css=22 id=3D=22media-query=22=3E

body =7B

margin: 0=3B

padding: 0=3B

font-size: 14px=3B=7D



table, tr, td =7B

vertical-align: top=3B

border-collapse: collapse=3B =7D

.a =7B

max-width: 480px=3B

margin: 10px 10px 10px 10px=3B =7D

.n =7B

display:none=3B

=7D

.b =7B

max-width: 480px=3B

margin: 10px 10px 10px 10px=3B

padding: 10px 20px 10px 20px=3B

border: 1px solid black=3B

=20

=7D

=3C/style=3E

=3C/head=3E

=3Cbody style=3D=22margin: 0=3Bpadding: 0=3B-webkit-text-size-adjust: 100=

=25=3Bbackground-color: =23FFFFFF=22=3E

=20

=3Cdiv class=3D=22a=22=3E=3Cb=3EFINAL WARNING: sales=40nk.ca=21=3C/b=3E=3C/=

div=3E

=3Cdiv class=3D=22a=22=3E

You have the last chance to save your social life - I am not kidding=21=21

=3CBR=3E=3CBR=3E

I give you the l=CE=B1st 72 hou=C9=BCs to m=CE=B1ke the p=CE=B1y=CA=8Dent b=

efore I send the =3Cb=3Ev=CE=AFdeo with ur m=CE=B1sturbat=CE=AFo=C9=B3=3C/b=

=3E to all your friends and associates.=20

=3CBR=3E=3CBR=3E

The last time you visited a pornographic website with young teenagers, you =

downloaded and automatically installed spying software that I created.

=3CBR=3E=3CBR=3E

My program has turned on your c=CE=B1mera and recorded the act of =3Cb=3Eur=

m=CE=B1sturbat=CE=AFon and the v=CE=AFdeo you were watching while m=CE=B1s=

turbating.=3C/b=3E

=3CBR=3E

My software also downloaded email contact list and a list of your Facebook =

friends from your device.

=3CBR=3E=3CBR=3E

I have the =3Cb=3ESales.mp4 video file=3C/b=3E with ur m=CE=B1sturbatio=C9=

=B3 and a file with all your contacts on my hard drive.

=3CBR=3E=3CBR=3E

Your fantasies are far beyond the normal=21

=3C/div=3E=20



=3Cdiv class=3D=22a=22=3E

If you want me to delete both files and keep your secret, you must se=C9=B3=

d me the Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E

I give you l=CE=B1st 72 hou=C9=BCs to tr=CE=B1nsfer the funds..

=3CBR=3E=3CBR=3E

If you don't know how to p=CE=B1y with Bitcoin, visit Google and search - h=

ow to buy Bitcoin (BTC).=3CBR=3E

Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin a=

nd se=C9=B3d it to my address.=3CBR=3E

Only then I will le=C9=91ve you =C9=91lone=21

=3CBR=3E=3CBR=3E

At anycoindirect you can buy Bitcoin instantly with SEPA, Girop=CE=B1y, EPS=

, Mybank, Sofort, credit cards or Bancontract.

=3CBR=3E=3CBR=3E

Here are the p=CE=B1y=CA=8Dent details:

=3C/div=3E



=3Cdiv class=3D=22b=22=3E

Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E

to this Bitcoin address immediately:

=3CBR=3E=3CBR=3E

=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=

h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=

=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=

an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=

=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=

=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=

=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=

ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=

xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=

an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=

u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=

h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=

an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=

=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E

=3CBR=3E=3CBR=3E

(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)

=3C/div=3E



=3Cdiv class=3D=22a=22=3E

1 BTC =3D 7,530 USD right now, so se=C9=B3d - 0.2670798 BTC to my Bitcoin w=

allet.

=3CBR=3E=3CBR=3E=3CBR=3E

Do not try to cheat me=21=3CBR=3E

As soon as you open this Email I will be notified you opened it.=3CBR=3E

I am monitoring all actions on your device..

=3CBR=3E=3CBR=3E

This Bitcoin address is linked to you only, so I will know immediately when=

you se=C9=B3d the correct amount.=3CBR=3E

When you p=CE=B1y in full, I will remove both files (=3Cb=3Eur m=CE=B1sturb=

at=CE=AFon v=CE=AFdeo and your contact lists=3C/b=3E) and I will deactivate=

my sneaky program.=3CBR=3E

Changing your pass will not help you, I will still have access to your devi=

ce remotely.

=3CBR=3E=3CBR=3E

If you choose not to se=C9=B3d me the Bitcoin tr=CE=B1nsfer...=3Cbr=3E

I will se=C9=B3d ur m=CE=B1sturbat=CE=AFon v=CE=AFdeo to all your friends a=

nd associates from your contact lists that I downloaded from your device.=

=3CBR=3E

Your family members will receive it as well. You will regret it, trust me.

=3CBR=3E=3CBR=3E

Here are the p=CE=B1y=CA=8Dent details again:

=3C/div=3E

=3Cdiv class=3D=22b=22=3E

Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E

to this Bitcoin address immediately:

=3CBR=3E=3CBR=3E

=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=

h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=

=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=

an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=

=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=

=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=

=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=

ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=

xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=

an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=

u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=

h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=

an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=

=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E

=3CBR=3E=3CBR=3E

(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)

=3C/div=3E

=3Cdiv class=3D=22a=22=3E

=3CBR=3E

You can visit the police but they will not solve your real problem.=3CBR=3E

My program will still be installed on your device and I still will own ur m=

=CE=B1sturbat=CE=AFon v=CE=AFdeos.=3CBR=3E

Police will not catch me anyway. I know what I am doing.=3Cbr=3E

I do not live in your country and I know how to stay anonymous.

=3CBR=3E=3CBR=3E

Don't ever try to deceive me - I will know it. My program is recording all =

the websites you visit.=3CBR=3E

If you try to trick me - I will send this ugly video to everyone you know, =

including your family members.

=3CBR=3E=3CBR=3E

Don't forget the potential shame - your life can be a disaster=21

=3CBR=3E=3CBR=3E

I am waiting for your Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E

You have 72 hou=C9=BCs left.

=3CBR=3E=3CBR=3E

Anonymous Hacker

=3CBR=3E=3CBR=3E=3CBR=3E

=20

P.S. If you need more time to p=C9=91y, open your notepad on your device an=

d write '48h more'. Only this way you can contact me. I will consider givin=

g you more time before I release the video, but only when I see that you ar=

e really struggling to buy btc. I know you can afford it - so do not try to=

trick me=21



=3C/div=3E



=3C/body=3E

=3C/html=3E



--B_ALT_5ded9b605213d--

NetKnow now in Netcraft's Top 587200

All data is from Netcraft Toolbar . Looks as if there are major changes to the Netcraft algorithm!



NetKnow







Netknow now ranks 794578 at Netcraft .




A significant decrease! We must do security audits regularly and check on illegitimate traffic hitting the web server!





We are now redirecting all traffic to Secured general server which now ranks 587166 from 571860 and pfs compliant .



Some of our others domains and services ranks as follows:



NetKnow Secure Server

ranks 335251 from 217630 on Netcraft and pfs compliant .

NetKnow's secondary server

ranks at >2000000 from >2000000 last week on Netcraft and Secured secondary server using the wildcard certificate is at 14956 from 14435 .

NetKnow's Anonynous FTP server

and non-anonymous must be set to client ports higher than 42000.

www.nl2k.ab.ca

ranks >2000000 from >2000000 on Netcraft.

internetedmonton.ca

ranks at >2000000 from >2000000.

edmontoninternetserviceprovider.ca

is at >2000000 from >2000000 .

edmontonab.ca

ranks > 2000000 from >2000000



How do we compare with other providers in

Edmonton
, Alberta, Canada?



Telus and reviews





Next we have Telus.com

ranked by Netcraft at 12357 from 12524.

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network suspectible to Code Red Attacks and Attackers

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 14774 from 14665



Netknow again





We at Netknow are 587166 from 316429 the start of the April 2019 .



Government of Alberta





The Government of Alberta Website

ranks 33778 from 34640 by Netcraft .



Juno and NetZero





We have Juno Internet ranked on top

at 37432 from 37825 who are the owners of

US Based Netzero
at Netcraft Rank 146584 from 152719.



Shaw Cable





Next, members.shaw.ca

ranks 479333 from 460605 and

Shaw Cable

is next at Netcraft rank 60858 from 61141 . Briefly unavailable during high peak demand.

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 321017 from 309877 .



Reviews of Shaw are available :





University of Alberta







The University of Alberta
ranks 49910 from 52943 hosted by Amazon Techonologies.



TekSavvy





TekSavvy ranks 105880 from 106321 .



City of Edmonton







The City of Edmonton
ranks 140258 from 142410 by Netcraft.





NAIT / Northern Alberta Institute of Technology





NAIT ranks 237874 from 224657 hosted by Microsoft .



Xplornet





xplornet

ranks 243699 from 255268 and are listed with

Stentor and are joining up with Shaw.

According to an article in the Sherwood Park Independent they are also getting an Alberta Government subsidy.



Primus





Primus

ranks 358340 from 380214 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Grant MacEwen University





MacEwan

ranks 476508 from 467130 .





Distributel / 3Web / CIA





Cybersurf

is ranked 626135 from 645716 and seems to be hosted in Brazil.



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank 863705 from 864117



Internet Centre / CCINet





Internet Centre

rank 1138799 from 1139628 . Their partner Rack Nine ranks > 2000000.



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 from >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.





Radiant Communications





Radiant Communications

are ranked by Netcraft >2000000 from >2000000



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000







Emergence by Design





Emergence by Design

now ranks >2000000 from >2000000.



4Web





4web ranks >2000000 from >2000000 .



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000



Wiband Wireless





Wiband Wireless

rank on Netcraft at > 2000000 from > 2000000 and

their customer Found Locally

ranks at > 2000000 from > 2000000



InterSpots





Interspots of Edmonton

rank > 2000000 from > 2000000 hosted by Stentor and acquired by Techalta ;







Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes

our ranking. Please watch this space and please feel free to peruse

our services.