More bitcoin porn blackmail phishing
Posted by Dave Yadallee on
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Sun, 08 Dec 2019 18:00:55 -0700
Received: from mx.thranite.disspreading.monster ([206.189.119.111]:57418)
by doctor.nl2k.ab.ca with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256)
(Exim 4.92.3 (FreeBSD))
(envelope-from)
id 1ie7Nh-000Frp-Hc
for sales@nk.ca; Sun, 08 Dec 2019 17:58:48 -0700
Received: from mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1])
by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPv40XM2z22Jh
for; Mon, 9 Dec 2019 00:58:08 +0000 (UTC)
Authentication-Results: mx.thranite.disspreading.monster (amavisd-new);
dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"
header.d=thranite.disspreading.monster
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
thranite.disspreading.monster; h=content-type:content-type
:mime-version:message-id:x-mailer:user-agent:reply-to
:list-unsubscribe:subject:subject:to:from:from:date:date; s=
dkim; t=1575853087; x=1578445088; bh=+u/4Cgh2FS1oc3x04D0aDBcxt9k
0uklME67rf1/PhdQ=; b=gk5tm8Er4B8Xc6LP9uW9TfIHtt9lRbmegcw7L+hx4/r
CgRpRYU+9z0WoU9VP/TNoIlesB96/G+oPMjBgWmVCAsd2d4cBslwtiJ5tgnRU9Qm
JgH5W6Nlijj8K5SdLVmhy8Ds3hmcALGd6dKAfHDUm7keUskL78VYRbTJtZ/Gqd+Y
=
X-Virus-Scanned: Debian amavisd-new at mx.thranite.disspreading.monster
Received: from mx.thranite.disspreading.monster ([127.0.0.1])
by mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id G0fzn4_w97o9 for;
Mon, 9 Dec 2019 00:58:07 +0000 (UTC)
Received: from [127.0.0.1] (mx.thranite.disspreading.monster [127.0.0.1])
by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPqN4tmmz221R
for; Mon, 9 Dec 2019 00:54:56 +0000 (UTC)
Date: Mon, 9 Dec 2019 00:54:55 +0000
From: =?UTF-8?Q?=CE=B1nonymous=20h=CE=B1cker?=
To: sales@nk.ca
Subject: =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=
List-Unsubscribe:
Reply-To:
User-Agent: CodeIgniter
X-Sender: gonzalobetz@thranite.disspreading.monster
X-Mailer: CodeIgniter
X-Priority: 3 (Normal)
Message-ID: <5ded9b605211d@thranite.disspreading.monster>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="B_ALT_5ded9b605213d"
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FINAL WARNING: sales@nk.ca! You have the last chance to save
your social life - I am not kidding!! I give you the lαst 72 houɼs to mαke
the pαyÊent before I seɳd the video with ur mαsturbatίoɳ to all your
friends and associates.
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nk.ca]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[206.189.119.111 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in
dnsbl.ahbl.org
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[206.189.119.111 listed in psbl.surriel.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in
will-spam-for-food.eu.org
[206.189.119.111 listed in will-spam-for-food.eu.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
2.3 MANGLED_LIST BODY: mangled list
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
2.3 MANGLED_VIDEO BODY: mangled video(s)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_FROM_FMBLA_NEWDOM From domain was registered in last 7 days
Subject: {SPAM?} =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=
X-Antivirus: AVG (VPS 191208-0, 12/08/2019), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
Your email application may not support this format.
--B_ALT_5ded9b605213d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
FINAL WARNING: sales@nk.ca!
You have the last chance to save your social life - I am not kidding!!
I give you the lαst 72 houɼs to mαke the pαyÊent before I seɳd the
video with ur mαsturbatίoɳ to all your friends and associates.
The last time you visited a pornographic website with young teenagers, you
downloaded and automatically installed spying software that I created.
My program has turned on your cαmera and recorded the act of ur
mαsturbatίoɳ and the video you were watching while mαsturbating.
My software also downloaded email contact list and a list of your Facebook
friends from your device.
I have the Sales.mp4 video file with ur mαsturbatίoɳ and a file with all
your contacts on my hard drive.
Your fantasies are far beyond the normal!
If you want me to delete both files and keep your secret, you must seɳd me
the Bitcoin pαyÊent.
I give you lαst 72 houɼs to trαnsfer the funds..
If you don't know how to pαy with Bitcoin, visit Google and search - how to
buy Bitcoin (BTC).
Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin
and seɳd it to my address.
Only then I will leɑve you ɑlone!
At anycoindirect you can buy Bitcoin instantly with SEPA, Giropαy, EPS,
Mybank, Sofort, credit cards or Bancontract.
Here are the pαyÊent details:
******************************************
Seɳd 2,000 USD = 0.2670798 BTC
to this Bitcoin address immediately:
38hrB7FHvyLKJ7o5L
++ ++
Z89S3dL4uy5KgX5DP
(Copy & Ƿαste - it's case sensitive - and combine both lines into one
single line - my bitcoin address)
******************************************
1 BTC = 7,530 USD right now, so seɳd - 0.2670798 BTC to my Bitcoin wallet.
Do not try to cheat me!
As soon as you open this Email I will be notified you opened it.
I am monitoring all actions on your device..
This Bitcoin address is linked to you only, so I will know immediately when
you seɳd the correct amount.
When you pαy in full, I will remove both files (ur mαsturbation video and
your contact lists) and I will deactivate my sneaky program.
Changing your pass will not help you, I will still have access to your
device remotely.
If you choose not to seɳd me the Bitcoin trαnsfer...
I will seɳd ur mαsturbation video to all your friends and associates from
your contact lists that I downloaded from your device.
Your family members will receive it as well.
You will regret it, trust me.
Here are the pαyÊent details again:
******************************************
Seɳd 2,000 USD = 0.2670798 BTC
to this Bitcoin address immediately:
38hrB7FHvyLKJ7o5L
++ ++
Z89S3dL4uy5KgX5DP
(Copy & Ƿαste - it's case sensitive - and combine both lines into one
single line - my bitcoin address)
******************************************
You can visit the police but they will not solve your real problem.
My program will still be installed on your device and I still will own ur
mαsturbatioɳ videos.
Police will not catch me anyway. I know what I am doing.
I do not live in your country and I know how to stay anonymous.
Don't ever try to deceive me - I will know it. My program is recording all
the websites you visit.
If you try to trick me - I will seɳd this ugly video to everyone you know,
including your family members.
Don't forget the potential shame - your life can be a disaster!
I am waiting for your Bitcoin pαyÊent.
You have 72 houɼs left.
Anonymous Hacker
P.S. If you need more time to pɑy, open your notepad on your device and
write '48h more'. Only this way you can contact me. I will consider giving
you more time before I release the video, but only when I see that you are
really struggling to buy btc. I know you can afford it - so do not try to
trick me!
--B_ALT_5ded9b605213d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=3C=21DOCTYPE HTML PUBLIC =22-//W3C//DTD XHTML 1.0 Transitional //EN=22 =22=
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd=22=3E
=3Chtml xmlns=3D=22http://www.w3.org/1999/xhtml=22 xmlns:v=3D=22urn:schemas=
-microsoft-com:vml=22 xmlns:o=3D=22urn:schemas-microsoft-com:office:office=
=22=3E
=3Chead=3E
=3Cmeta http-equiv=3D=22Content-Type=22 content=3D=22text/html=3B charset=
=3Dutf-8=22=3E
=3Cmeta name=3D=22viewport=22 content=3D=22width=3Ddevice-width=22=3E
=3C=21--=5Bif =21mso=5D=3E=3C=21--=3E=3Cmeta http-equiv=3D=22X-UA-Compatibl=
e=22 content=3D=22IE=3Dedge=22=3E=3C=21--=3C=21=5Bendif=5D--=3E
=3C=21--=5Bif =21mso=5D=3E=3C=21-- --=3E
=3C=21--=3C=21=5Bendif=5D--=3E
=3Cstyle type=3D=22text/css=22 id=3D=22media-query=22=3E
body =7B
margin: 0=3B
padding: 0=3B
font-size: 14px=3B=7D
table, tr, td =7B
vertical-align: top=3B
border-collapse: collapse=3B =7D
.a =7B
max-width: 480px=3B
margin: 10px 10px 10px 10px=3B =7D
.n =7B
display:none=3B
=7D
.b =7B
max-width: 480px=3B
margin: 10px 10px 10px 10px=3B
padding: 10px 20px 10px 20px=3B
border: 1px solid black=3B
=20
=7D
=3C/style=3E
=3C/head=3E
=3Cbody style=3D=22margin: 0=3Bpadding: 0=3B-webkit-text-size-adjust: 100=
=25=3Bbackground-color: =23FFFFFF=22=3E
=20
=3Cdiv class=3D=22a=22=3E=3Cb=3EFINAL WARNING: sales=40nk.ca=21=3C/b=3E=3C/=
div=3E
=3Cdiv class=3D=22a=22=3E
You have the last chance to save your social life - I am not kidding=21=21
=3CBR=3E=3CBR=3E
I give you the l=CE=B1st 72 hou=C9=BCs to m=CE=B1ke the p=CE=B1y=CA=8Dent b=
efore I send the =3Cb=3Ev=CE=AFdeo with ur m=CE=B1sturbat=CE=AFo=C9=B3=3C/b=
=3E to all your friends and associates.=20
=3CBR=3E=3CBR=3E
The last time you visited a pornographic website with young teenagers, you =
downloaded and automatically installed spying software that I created.
=3CBR=3E=3CBR=3E
My program has turned on your c=CE=B1mera and recorded the act of =3Cb=3Eur=
m=CE=B1sturbat=CE=AFon and the v=CE=AFdeo you were watching while m=CE=B1s=
turbating.=3C/b=3E
=3CBR=3E
My software also downloaded email contact list and a list of your Facebook =
friends from your device.
=3CBR=3E=3CBR=3E
I have the =3Cb=3ESales.mp4 video file=3C/b=3E with ur m=CE=B1sturbatio=C9=
=B3 and a file with all your contacts on my hard drive.
=3CBR=3E=3CBR=3E
Your fantasies are far beyond the normal=21
=3C/div=3E=20
=3Cdiv class=3D=22a=22=3E
If you want me to delete both files and keep your secret, you must se=C9=B3=
d me the Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E
I give you l=CE=B1st 72 hou=C9=BCs to tr=CE=B1nsfer the funds..
=3CBR=3E=3CBR=3E
If you don't know how to p=CE=B1y with Bitcoin, visit Google and search - h=
ow to buy Bitcoin (BTC).=3CBR=3E
Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin a=
nd se=C9=B3d it to my address.=3CBR=3E
Only then I will le=C9=91ve you =C9=91lone=21
=3CBR=3E=3CBR=3E
At anycoindirect you can buy Bitcoin instantly with SEPA, Girop=CE=B1y, EPS=
, Mybank, Sofort, credit cards or Bancontract.
=3CBR=3E=3CBR=3E
Here are the p=CE=B1y=CA=8Dent details:
=3C/div=3E
=3Cdiv class=3D=22b=22=3E
Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E
to this Bitcoin address immediately:
=3CBR=3E=3CBR=3E
=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=
h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=
=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=
an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=
=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=
=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=
=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=
ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=
xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=
an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=
u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=
h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=
an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=
=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E
=3CBR=3E=3CBR=3E
(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)
=3C/div=3E
=3Cdiv class=3D=22a=22=3E
1 BTC =3D 7,530 USD right now, so se=C9=B3d - 0.2670798 BTC to my Bitcoin w=
allet.
=3CBR=3E=3CBR=3E=3CBR=3E
Do not try to cheat me=21=3CBR=3E
As soon as you open this Email I will be notified you opened it.=3CBR=3E
I am monitoring all actions on your device..
=3CBR=3E=3CBR=3E
This Bitcoin address is linked to you only, so I will know immediately when=
you se=C9=B3d the correct amount.=3CBR=3E
When you p=CE=B1y in full, I will remove both files (=3Cb=3Eur m=CE=B1sturb=
at=CE=AFon v=CE=AFdeo and your contact lists=3C/b=3E) and I will deactivate=
my sneaky program.=3CBR=3E
Changing your pass will not help you, I will still have access to your devi=
ce remotely.
=3CBR=3E=3CBR=3E
If you choose not to se=C9=B3d me the Bitcoin tr=CE=B1nsfer...=3Cbr=3E
I will se=C9=B3d ur m=CE=B1sturbat=CE=AFon v=CE=AFdeo to all your friends a=
nd associates from your contact lists that I downloaded from your device.=
=3CBR=3E
Your family members will receive it as well. You will regret it, trust me.
=3CBR=3E=3CBR=3E
Here are the p=CE=B1y=CA=8Dent details again:
=3C/div=3E
=3Cdiv class=3D=22b=22=3E
Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E
to this Bitcoin address immediately:
=3CBR=3E=3CBR=3E
=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=
h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=
=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=
an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=
=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=
=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=
=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=
ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=
xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=
an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=
u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=
h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=
an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=
=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E
=3CBR=3E=3CBR=3E
(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)
=3C/div=3E
=3Cdiv class=3D=22a=22=3E
=3CBR=3E
You can visit the police but they will not solve your real problem.=3CBR=3E
My program will still be installed on your device and I still will own ur m=
=CE=B1sturbat=CE=AFon v=CE=AFdeos.=3CBR=3E
Police will not catch me anyway. I know what I am doing.=3Cbr=3E
I do not live in your country and I know how to stay anonymous.
=3CBR=3E=3CBR=3E
Don't ever try to deceive me - I will know it. My program is recording all =
the websites you visit.=3CBR=3E
If you try to trick me - I will send this ugly video to everyone you know, =
including your family members.
=3CBR=3E=3CBR=3E
Don't forget the potential shame - your life can be a disaster=21
=3CBR=3E=3CBR=3E
I am waiting for your Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E
You have 72 hou=C9=BCs left.
=3CBR=3E=3CBR=3E
Anonymous Hacker
=3CBR=3E=3CBR=3E=3CBR=3E
=20
P.S. If you need more time to p=C9=91y, open your notepad on your device an=
d write '48h more'. Only this way you can contact me. I will consider givin=
g you more time before I release the video, but only when I see that you ar=
e really struggling to buy btc. I know you can afford it - so do not try to=
trick me=21
=3C/div=3E
=3C/body=3E
=3C/html=3E
--B_ALT_5ded9b605213d--
Envelope-to: sales@nk.ca
Delivery-date: Sun, 08 Dec 2019 18:00:55 -0700
Received: from mx.thranite.disspreading.monster ([206.189.119.111]:57418)
by doctor.nl2k.ab.ca with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256)
(Exim 4.92.3 (FreeBSD))
(envelope-from
id 1ie7Nh-000Frp-Hc
for sales@nk.ca; Sun, 08 Dec 2019 17:58:48 -0700
Received: from mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1])
by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPv40XM2z22Jh
for
Authentication-Results: mx.thranite.disspreading.monster (amavisd-new);
dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"
header.d=thranite.disspreading.monster
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
thranite.disspreading.monster; h=content-type:content-type
:mime-version:message-id:x-mailer:user-agent:reply-to
:list-unsubscribe:subject:subject:to:from:from:date:date; s=
dkim; t=1575853087; x=1578445088; bh=+u/4Cgh2FS1oc3x04D0aDBcxt9k
0uklME67rf1/PhdQ=; b=gk5tm8Er4B8Xc6LP9uW9TfIHtt9lRbmegcw7L+hx4/r
CgRpRYU+9z0WoU9VP/TNoIlesB96/G+oPMjBgWmVCAsd2d4cBslwtiJ5tgnRU9Qm
JgH5W6Nlijj8K5SdLVmhy8Ds3hmcALGd6dKAfHDUm7keUskL78VYRbTJtZ/Gqd+Y
=
X-Virus-Scanned: Debian amavisd-new at mx.thranite.disspreading.monster
Received: from mx.thranite.disspreading.monster ([127.0.0.1])
by mx.thranite.disspreading.monster (mx.thranite.disspreading.monster [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id G0fzn4_w97o9 for
Mon, 9 Dec 2019 00:58:07 +0000 (UTC)
Received: from [127.0.0.1] (mx.thranite.disspreading.monster [127.0.0.1])
by mx.thranite.disspreading.monster (Postfix) with ESMTP id 47WPqN4tmmz221R
for
Date: Mon, 9 Dec 2019 00:54:55 +0000
From: =?UTF-8?Q?=CE=B1nonymous=20h=CE=B1cker?=
To: sales@nk.ca
Subject: =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=
List-Unsubscribe:
Reply-To:
User-Agent: CodeIgniter
X-Sender: gonzalobetz@thranite.disspreading.monster
X-Mailer: CodeIgniter
X-Priority: 3 (Normal)
Message-ID: <5ded9b605211d@thranite.disspreading.monster>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="B_ALT_5ded9b605213d"
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FINAL WARNING: sales@nk.ca! You have the last chance to save
your social life - I am not kidding!! I give you the lαst 72 houɼs to mαke
the pαyÊent before I seɳd the video with ur mαsturbatίoɳ to all your
friends and associates.
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nk.ca]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[206.189.119.111 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in
dnsbl.ahbl.org
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[206.189.119.111 listed in psbl.surriel.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in
will-spam-for-food.eu.org
[206.189.119.111 listed in will-spam-for-food.eu.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
2.3 MANGLED_LIST BODY: mangled list
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
2.3 MANGLED_VIDEO BODY: mangled video(s)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_FROM_FMBLA_NEWDOM From domain was registered in last 7 days
Subject: {SPAM?} =?UTF-8?Q?This=20is=20my=20FINAL=20WARNING=20Sales!?=
X-Antivirus: AVG (VPS 191208-0, 12/08/2019), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
Your email application may not support this format.
--B_ALT_5ded9b605213d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
FINAL WARNING: sales@nk.ca!
You have the last chance to save your social life - I am not kidding!!
I give you the lαst 72 houɼs to mαke the pαyÊent before I seɳd the
video with ur mαsturbatίoɳ to all your friends and associates.
The last time you visited a pornographic website with young teenagers, you
downloaded and automatically installed spying software that I created.
My program has turned on your cαmera and recorded the act of ur
mαsturbatίoɳ and the video you were watching while mαsturbating.
My software also downloaded email contact list and a list of your Facebook
friends from your device.
I have the Sales.mp4 video file with ur mαsturbatίoɳ and a file with all
your contacts on my hard drive.
Your fantasies are far beyond the normal!
If you want me to delete both files and keep your secret, you must seɳd me
the Bitcoin pαyÊent.
I give you lαst 72 houɼs to trαnsfer the funds..
If you don't know how to pαy with Bitcoin, visit Google and search - how to
buy Bitcoin (BTC).
Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin
and seɳd it to my address.
Only then I will leɑve you ɑlone!
At anycoindirect you can buy Bitcoin instantly with SEPA, Giropαy, EPS,
Mybank, Sofort, credit cards or Bancontract.
Here are the pαyÊent details:
******************************************
Seɳd 2,000 USD = 0.2670798 BTC
to this Bitcoin address immediately:
38hrB7FHvyLKJ7o5L
++ ++
Z89S3dL4uy5KgX5DP
(Copy & Ƿαste - it's case sensitive - and combine both lines into one
single line - my bitcoin address)
******************************************
1 BTC = 7,530 USD right now, so seɳd - 0.2670798 BTC to my Bitcoin wallet.
Do not try to cheat me!
As soon as you open this Email I will be notified you opened it.
I am monitoring all actions on your device..
This Bitcoin address is linked to you only, so I will know immediately when
you seɳd the correct amount.
When you pαy in full, I will remove both files (ur mαsturbation video and
your contact lists) and I will deactivate my sneaky program.
Changing your pass will not help you, I will still have access to your
device remotely.
If you choose not to seɳd me the Bitcoin trαnsfer...
I will seɳd ur mαsturbation video to all your friends and associates from
your contact lists that I downloaded from your device.
Your family members will receive it as well.
You will regret it, trust me.
Here are the pαyÊent details again:
******************************************
Seɳd 2,000 USD = 0.2670798 BTC
to this Bitcoin address immediately:
38hrB7FHvyLKJ7o5L
++ ++
Z89S3dL4uy5KgX5DP
(Copy & Ƿαste - it's case sensitive - and combine both lines into one
single line - my bitcoin address)
******************************************
You can visit the police but they will not solve your real problem.
My program will still be installed on your device and I still will own ur
mαsturbatioɳ videos.
Police will not catch me anyway. I know what I am doing.
I do not live in your country and I know how to stay anonymous.
Don't ever try to deceive me - I will know it. My program is recording all
the websites you visit.
If you try to trick me - I will seɳd this ugly video to everyone you know,
including your family members.
Don't forget the potential shame - your life can be a disaster!
I am waiting for your Bitcoin pαyÊent.
You have 72 houɼs left.
Anonymous Hacker
P.S. If you need more time to pɑy, open your notepad on your device and
write '48h more'. Only this way you can contact me. I will consider giving
you more time before I release the video, but only when I see that you are
really struggling to buy btc. I know you can afford it - so do not try to
trick me!
--B_ALT_5ded9b605213d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=3C=21DOCTYPE HTML PUBLIC =22-//W3C//DTD XHTML 1.0 Transitional //EN=22 =22=
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd=22=3E
=3Chtml xmlns=3D=22http://www.w3.org/1999/xhtml=22 xmlns:v=3D=22urn:schemas=
-microsoft-com:vml=22 xmlns:o=3D=22urn:schemas-microsoft-com:office:office=
=22=3E
=3Chead=3E
=3Cmeta http-equiv=3D=22Content-Type=22 content=3D=22text/html=3B charset=
=3Dutf-8=22=3E
=3Cmeta name=3D=22viewport=22 content=3D=22width=3Ddevice-width=22=3E
=3C=21--=5Bif =21mso=5D=3E=3C=21--=3E=3Cmeta http-equiv=3D=22X-UA-Compatibl=
e=22 content=3D=22IE=3Dedge=22=3E=3C=21--=3C=21=5Bendif=5D--=3E
=3C=21--=5Bif =21mso=5D=3E=3C=21-- --=3E
=3C=21--=3C=21=5Bendif=5D--=3E
=3Cstyle type=3D=22text/css=22 id=3D=22media-query=22=3E
body =7B
margin: 0=3B
padding: 0=3B
font-size: 14px=3B=7D
table, tr, td =7B
vertical-align: top=3B
border-collapse: collapse=3B =7D
.a =7B
max-width: 480px=3B
margin: 10px 10px 10px 10px=3B =7D
.n =7B
display:none=3B
=7D
.b =7B
max-width: 480px=3B
margin: 10px 10px 10px 10px=3B
padding: 10px 20px 10px 20px=3B
border: 1px solid black=3B
=20
=7D
=3C/style=3E
=3C/head=3E
=3Cbody style=3D=22margin: 0=3Bpadding: 0=3B-webkit-text-size-adjust: 100=
=25=3Bbackground-color: =23FFFFFF=22=3E
=20
=3Cdiv class=3D=22a=22=3E=3Cb=3EFINAL WARNING: sales=40nk.ca=21=3C/b=3E=3C/=
div=3E
=3Cdiv class=3D=22a=22=3E
You have the last chance to save your social life - I am not kidding=21=21
=3CBR=3E=3CBR=3E
I give you the l=CE=B1st 72 hou=C9=BCs to m=CE=B1ke the p=CE=B1y=CA=8Dent b=
efore I send the =3Cb=3Ev=CE=AFdeo with ur m=CE=B1sturbat=CE=AFo=C9=B3=3C/b=
=3E to all your friends and associates.=20
=3CBR=3E=3CBR=3E
The last time you visited a pornographic website with young teenagers, you =
downloaded and automatically installed spying software that I created.
=3CBR=3E=3CBR=3E
My program has turned on your c=CE=B1mera and recorded the act of =3Cb=3Eur=
m=CE=B1sturbat=CE=AFon and the v=CE=AFdeo you were watching while m=CE=B1s=
turbating.=3C/b=3E
=3CBR=3E
My software also downloaded email contact list and a list of your Facebook =
friends from your device.
=3CBR=3E=3CBR=3E
I have the =3Cb=3ESales.mp4 video file=3C/b=3E with ur m=CE=B1sturbatio=C9=
=B3 and a file with all your contacts on my hard drive.
=3CBR=3E=3CBR=3E
Your fantasies are far beyond the normal=21
=3C/div=3E=20
=3Cdiv class=3D=22a=22=3E
If you want me to delete both files and keep your secret, you must se=C9=B3=
d me the Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E
I give you l=CE=B1st 72 hou=C9=BCs to tr=CE=B1nsfer the funds..
=3CBR=3E=3CBR=3E
If you don't know how to p=CE=B1y with Bitcoin, visit Google and search - h=
ow to buy Bitcoin (BTC).=3CBR=3E
Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin a=
nd se=C9=B3d it to my address.=3CBR=3E
Only then I will le=C9=91ve you =C9=91lone=21
=3CBR=3E=3CBR=3E
At anycoindirect you can buy Bitcoin instantly with SEPA, Girop=CE=B1y, EPS=
, Mybank, Sofort, credit cards or Bancontract.
=3CBR=3E=3CBR=3E
Here are the p=CE=B1y=CA=8Dent details:
=3C/div=3E
=3Cdiv class=3D=22b=22=3E
Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E
to this Bitcoin address immediately:
=3CBR=3E=3CBR=3E
=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=
h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=
=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=
an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=
=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=
=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=
=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=
ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=
xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=
an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=
u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=
h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=
an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=
=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E
=3CBR=3E=3CBR=3E
(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)
=3C/div=3E
=3Cdiv class=3D=22a=22=3E
1 BTC =3D 7,530 USD right now, so se=C9=B3d - 0.2670798 BTC to my Bitcoin w=
allet.
=3CBR=3E=3CBR=3E=3CBR=3E
Do not try to cheat me=21=3CBR=3E
As soon as you open this Email I will be notified you opened it.=3CBR=3E
I am monitoring all actions on your device..
=3CBR=3E=3CBR=3E
This Bitcoin address is linked to you only, so I will know immediately when=
you se=C9=B3d the correct amount.=3CBR=3E
When you p=CE=B1y in full, I will remove both files (=3Cb=3Eur m=CE=B1sturb=
at=CE=AFon v=CE=AFdeo and your contact lists=3C/b=3E) and I will deactivate=
my sneaky program.=3CBR=3E
Changing your pass will not help you, I will still have access to your devi=
ce remotely.
=3CBR=3E=3CBR=3E
If you choose not to se=C9=B3d me the Bitcoin tr=CE=B1nsfer...=3Cbr=3E
I will se=C9=B3d ur m=CE=B1sturbat=CE=AFon v=CE=AFdeo to all your friends a=
nd associates from your contact lists that I downloaded from your device.=
=3CBR=3E
Your family members will receive it as well. You will regret it, trust me.
=3CBR=3E=3CBR=3E
Here are the p=CE=B1y=CA=8Dent details again:
=3C/div=3E
=3Cdiv class=3D=22b=22=3E
Se=C9=B3d 2,000 USD =3D =3Cb=3E0.2670798 BTC=3C/b=3E=3CBR=3E
to this Bitcoin address immediately:
=3CBR=3E=3CBR=3E
=3Cb=3E38h=3Cspan class=3D=22ITxRu=22=3Er=3C/span=3E=3Cspan id=3D=22woaMHSt=
h=22=3EB=3C/span=3E7=3Cspan class=3D=22n=22=3EIJF=3C/span=3EF=3Cspan class=
=3D=22JMn4CZUbqE1H=22=3EH=3C/span=3E=3Cspan class=3D=22GM4aweE=22=3Ev=3C/sp=
an=3E=3Cspan class=3D=22rd7Cz2s0=22=3E=3C/span=3EyL=3Cspan class=3D=22FJB=
=22=3E=3C/span=3EKJ=3Cspan class=3D=22n=22=3EvAcML5EIC=3C/span=3E=3Cspan id=
=3D=2206PGdJ=22=3E7=3C/span=3Eo=3Cspan class=3D=22n=22=3EuqWZcJQe=3C/span=
=3E5L=3Cspan class=3D=22n=22=3EUwaY=3C/span=3EZ8=3Cspan class=3D=22n=22=3EV=
ymQi=3C/span=3E9=3Cspan class=3D=22n=22=3EsUD=3C/span=3E=3Cspan class=3D=22=
xfnt1Yp6=22=3E=3C/span=3ES3d=3Cspan class=3D=22n=22=3EB7KQ=3C/span=3EL=3Csp=
an class=3D=22n=22=3E8m=3C/span=3E4=3Cspan class=3D=22n=22=3EiZ7=3C/span=3E=
u=3Cspan class=3D=22n=22=3ESoH5BR=3C/span=3Ey=3Cspan class=3D=22n=22=3EnFpO=
h4C1fJER=3C/span=3E5=3Cspan class=3D=22n=22=3EUONSp2foPYCL=3C/span=3EK=3Csp=
an class=3D=22u3xAyVY=22=3Eg=3C/span=3E=3Cspan id=3D=229Xij=22=3EX=3C/span=
=3E=3Cspan id=3D=22iSdLWrf1h9C3=22=3E5=3C/span=3EDP=3C/b=3E
=3CBR=3E=3CBR=3E
(Copy =26 =C7=B7=CE=B1ste address - it's case sensitive)
=3C/div=3E
=3Cdiv class=3D=22a=22=3E
=3CBR=3E
You can visit the police but they will not solve your real problem.=3CBR=3E
My program will still be installed on your device and I still will own ur m=
=CE=B1sturbat=CE=AFon v=CE=AFdeos.=3CBR=3E
Police will not catch me anyway. I know what I am doing.=3Cbr=3E
I do not live in your country and I know how to stay anonymous.
=3CBR=3E=3CBR=3E
Don't ever try to deceive me - I will know it. My program is recording all =
the websites you visit.=3CBR=3E
If you try to trick me - I will send this ugly video to everyone you know, =
including your family members.
=3CBR=3E=3CBR=3E
Don't forget the potential shame - your life can be a disaster=21
=3CBR=3E=3CBR=3E
I am waiting for your Bitcoin p=CE=B1y=CA=8Dent.=3CBR=3E
You have 72 hou=C9=BCs left.
=3CBR=3E=3CBR=3E
Anonymous Hacker
=3CBR=3E=3CBR=3E=3CBR=3E
=20
P.S. If you need more time to p=C9=91y, open your notepad on your device an=
d write '48h more'. Only this way you can contact me. I will consider givin=
g you more time before I release the video, but only when I see that you ar=
e really struggling to buy btc. I know you can afford it - so do not try to=
trick me=21
=3C/div=3E
=3C/body=3E
=3C/html=3E
--B_ALT_5ded9b605213d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments