More bitcoin porn blackmail phishing

Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Fri, 29 Nov 2019 08:10:25 -0700

Received: from mx.temptress.unacceding.monster ([157.245.239.56]:54634)

by doctor.nl2k.ab.ca with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256)

(Exim 4.92.3 (FreeBSD))

(envelope-from )

id 1iahtr-0009BP-BP

for sales@nk.ca; Fri, 29 Nov 2019 08:10:25 -0700

Received: from mx.temptress.unacceding.monster (mx.temptress.unacceding.monster [127.0.0.1])

by mx.temptress.unacceding.monster (Postfix) with ESMTP id 47PdCK0lHlz24wh

for ; Fri, 29 Nov 2019 15:07:09 +0000 (UTC)

Authentication-Results: mx.temptress.unacceding.monster (amavisd-new);

dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"

header.d=temptress.unacceding.monster

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

temptress.unacceding.monster; h=content-type:content-type

:mime-version:message-id:x-mailer:user-agent:reply-to

:list-unsubscribe:subject:subject:to:from:from:date:date; s=

dkim; t=1575040028; x=1577632029; bh=NnhPEGPoWgWFvOWGll87sinOsrW

7RA33cCLhG9DX2Yw=; b=V7Up5W+8gcT8PgfpDEMqoD9f0+JAVxUg6iR/wWIB7iJ

13RSWLOw6AH1IudXjlO6aWCe0TK/3Tev8iJDw42U3/nvDxTEjNnT9eOneX2vC53v

qexc4P39LsPG1sM4qiN6o+8RN/8/auP8sZch2bOydJHDASeOsQEChCrs3DAJlkg8

=

X-Virus-Scanned: Debian amavisd-new at mx.temptress.unacceding.monster

Received: from mx.temptress.unacceding.monster ([127.0.0.1])

by mx.temptress.unacceding.monster (mx.temptress.unacceding.monster [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id JG-r5lUrTJin for ;

Fri, 29 Nov 2019 15:07:08 +0000 (UTC)

Received: from [127.0.0.1] (mx.temptress.unacceding.monster [127.0.0.1])

by mx.temptress.unacceding.monster (Postfix) with ESMTP id 47Pd164RSvz22v2

for ; Fri, 29 Nov 2019 14:58:18 +0000 (UTC)

Date: Fri, 29 Nov 2019 14:58:17 +0000

From: "Anonymous Hacker"

To: sales@nk.ca

Subject: =?UTF-8?Q?IMPORTANT!=20I=20recorded=20YOU=20m=C9=91sturbating!=20I=20hav?= =?UTF-8?Q?e=20Sales.mp4=20video=20file!?=

List-Unsubscribe:

Reply-To:

User-Agent: CodeIgniter

X-Sender: rossana-tracy@temptress.unacceding.monster

X-Mailer: CodeIgniter

X-Priority: 3 (Normal)

Message-ID: <5de1320a57d14@temptress.unacceding.monster>

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="B_ALT_5de1320a57d39"

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTENTION: sales@nk.ca The last time you visited a porn website

with teenagers, you silently downloaded and installed the software I developed.

My software has turned on your camera and recorded both your screen and an

act of your mɑsturbation..



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: nk.ca]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.245.239.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in

dnsbl.ahbl.org

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.5 HTML_SINGLET_MANY Many single-letter HTML format blocks

Subject: {SPAM?} =?UTF-8?Q?IMPORTANT!=20I=20recorded=20YOU=20m=C9=91sturbating!=20I=20hav?= =?UTF-8?Q?e=20Sales.mp4=20video=20file!?=

X-Antivirus: AVG (VPS 191128-0, 11/28/2019), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.

Your email application may not support this format.



--B_ALT_5de1320a57d39

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



ATTENTION: sales@nk.ca



The last time you visited a porn website with teenagers, you silently

downloaded and installed the software I developed.



My software has turned on your camera and recorded both your screen and an

act of your mɑsturbation..



My sneaky program also downloaded all your email contact lists and a list of

your friends from social networks.



I have the - Sales.mp4 video file - with you jerking off to teenagers, as

well as a file with your relatives and associates email addresses.



After downloading those files let me say one thing: your fantasies are far

beyond the normal!





If you want me to delete both files and keep your secret, you must send me

the Bitcoin payment.

Bitcoin is a secure cryptocurrency, very similar to BTC.

I give you 72 houɼs only to send the Bitcoin transfer.



If you don't know how to pay with Bitcoin, visit Google and search - how to

buy Bitcoin.

Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin

and send it to my address.

Only then I will leɑve you ɑlone!



At anycoindirect you can pay instantly with SEPA, Giropay, EPS, Mybank,

Sofort, credit cards or Bancontract.



******************************************

Send 2,000 USD = 0.271085 BTC

to this Bitcoin address as soon as possible:



34b4QdPbn8qHT6KGb

989YDid433cq3Nkfp



(copy & paste - it's case sensitive - and combine both lines into one single

address)



1 BTC = 7,530 USD right now, so send exactly 0.271085 BTC to my Bitcoin

wallet.

******************************************



Do not try to cheat me!

As soon as you open this Email I will be notified you opened it.

I am monitoring all actions on your device..



This Bitcoin address is linked to you only, so I will know immediately when

you send the correct amount.

When you pay in full, I will remove both files (your mɑsturbation video and

your contact lists) and I will deactivate my sneaky program.

Changing your password will not help you, I will still have access to your

device remotely.



If you choose not to send me the Bitcoin transfer...

I will send your mɑsturbation video to all your friends and associates from

your contact lists that I downloaded from your device.

Your family members will receive it as well. You will regret it, trust me.



Here are the payment details again:



******************************************

Send 2,000 USD = 0.271085 BTC

to this Bitcoin address as soon as possible:



34b4QdPbn8qHT6KGb

989YDid433cq3Nkfp



(copy & paste - it's case sensitive - and combine both lines into one single

address)

******************************************







You can visit police but they will not help you with solving the problem.

My program will still be installed on your device and I still will own your

mɑsturbation videos.

Police will not catch me anyway. I know what I am doing.

I do not live in your country and I know how to stay anonymous.



Don't ever try to deceive me - I will know it. My program is recording all

the websites you visit and all your key presses.

If you try to trick me - I will send this ugly video to everyone you know,

including your family members.



Don't forget the potential shame - your life can be a disaster.



I am waiting for your Bitcoin payment.

You have 72 houɼs left.





Anonymous Hacker











--B_ALT_5de1320a57d39

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=3C=21DOCTYPE HTML PUBLIC =22-//W3C//DTD XHTML 1.0 Transitional //EN=22 =22=

http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd=22=3E

=3Chtml xmlns=3D=22http://www.w3.org/1999/xhtml=22 xmlns:v=3D=22urn:schemas=

-microsoft-com:vml=22 xmlns:o=3D=22urn:schemas-microsoft-com:office:office=

=22=3E

=3Chead=3E

=3Cmeta http-equiv=3D=22Content-Type=22 content=3D=22text/html=3B charset=

=3Dutf-8=22=3E

=3Cmeta name=3D=22viewport=22 content=3D=22width=3Ddevice-width=22=3E

=3C=21--=5Bif =21mso=5D=3E=3C=21--=3E=3Cmeta http-equiv=3D=22X-UA-Compatibl=

e=22 content=3D=22IE=3Dedge=22=3E=3C=21--=3C=21=5Bendif=5D--=3E

=3C=21--=5Bif =21mso=5D=3E=3C=21-- --=3E

=3Clink href=3D=22https://fonts.googleapis.com/css?family=3DBitter=22 rel=

=3D=22stylesheet=22 type=3D=22text/css=22=3E

=3Clink href=3D=22https://fonts.googleapis.com/css?family=3DOpen+Sans=22 re=

l=3D=22stylesheet=22 type=3D=22text/css=22=3E

=3C=21--=3C=21=5Bendif=5D--=3E

=3Cstyle type=3D=22text/css=22 id=3D=22media-query=22=3E

body =7B

margin: 0=3B

padding: 0=3B =7D



table, tr, td =7B

vertical-align: top=3B

border-collapse: collapse=3B =7D



.a =7B

max-width: 480px=3B

margin: 10px 10px 10px 10px=3B

=20

=7D

.n =7B

display:none=3B

=7D

.b =7B

max-width: 480px=3B

margin: 10px 10px 10px 10px=3B

padding: 10px 20px 10px 20px=3B

border: 1px solid black=3B

=20

=7D

=3C/style=3E

=3C/head=3E

=3Cbody style=3D=22margin: 0=3Bpadding: 0=3B-webkit-text-size-adjust: 100=

=25=3Bbackground-color: =23FFFFFF=22=3E

=20

=3Cdiv class=3D=22a=22=3E=3Cb=3EATTENTION: sales=40nk.ca=3C/b=3E=3C/div=3E

=3Cdiv class=3D=22a=22=3E

The last time you visited a porn website with teenagers, you silently downl=

oaded and installed the software I developed.

=3CBR=3E=3CBR=3E

My software has turned on your camera and =3Cb=3Erecorded both your screen =

and the act of your m=C9=91sturbation..=3C/b=3E

=3CBR=3E=3CBR=3E

My sneaky program also downloaded all your email contact lists and a list o=

f your friends from social networks.

=3CBR=3E=3CBR=3E

I have the - =3Cb=3ESales.mp4 video file=3C/b=3E - with you jerking off to =

teenagers, as well as a file with your relatives and associates email addre=

sses.

=3CBR=3E=3CBR=3E

After downloading those files let me say one thing: your fantasies are far =

beyond the normal=21

=3C/div=3E=20



=3Cdiv class=3D=22a=22=3E

If you want me to delete both files and keep your secret, you must send me =

the Bitcoin (BTC) payment.=3CBR=3E

I give you 72 hou=C9=BCs only to send the Bitcoin transfer.

=3CBR=3E=3CBR=3E

If you don't know how to pay with Bitcoin, visit Google and search - how to=

buy Bitcoin (BTC).=3CBR=3E

Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin a=

nd send it to my address.=3CBR=3E

Only then I will le=C9=91ve you =C9=91lone=21

=3CBR=3E=3CBR=3E

At anycoindirect you can buy Bitcoin instantly with SEPA, Giropay, EPS, Myb=

ank, Sofort, credit cards or Bancontract.

=3CBR=3E=3CBR=3E

Here are the payment details:

=3C/div=3E



=3Cdiv class=3D=22b=22=3E

Send 2,000 USD =3D =3Cb=3E0.271085 BTC=3C/b=3E=3CBR=3E

to this Bitcoin address as soon as possible:

=3CBR=3E=3CBR=3E

=3Cb=3E=3Cspan class=3D=22l0m5owXTkcN=22=3E3=3C/span=3E4=3Cspan class=3D=22=

n=22=3EYQx0p=3C/span=3E=3Cspan id=3D=22ZNGFiACfhw=22=3Eb=3C/span=3E4=3Cspan=

class=3D=22PuIAk=22=3EQ=3C/span=3E=3Cspan class=3D=22eDST8=22=3E=3C/span=

=3EdP=3Cspan class=3D=22n=22=3EFGkc84TXdQj=3C/span=3E=3Cspan class=3D=22sfd=

KvUgVX23p=22=3E=3C/span=3Eb=3Cspan id=3D=22lR6vnf1q7KgJ=22=3En=3C/span=3E8=

=3Cspan class=3D=22n=22=3EKwLez=3C/span=3Eq=3Cspan class=3D=221BwxA=22=3EH=

=3C/span=3E=3Cspan class=3D=22IZq24COQEh=22=3ET=3C/span=3E=3Cspan class=3D=

=22xcr9=22=3E=3C/span=3E6K=3Cspan class=3D=22n=22=3EGdpvwMbZ=3C/span=3E=3Cs=

pan class=3D=226BkR81GUDz=22=3E=3C/span=3EG=3Cspan class=3D=22M6LlJ=22=3E=

=3C/span=3Eb=3Cspan id=3D=22J1AZE9=22=3E9=3C/span=3E=3Cspan id=3D=22vi8hjIS=

=22=3E8=3C/span=3E=3Cspan class=3D=22liV4ZK6=22=3E9=3C/span=3EY=3Cspan clas=

s=3D=22n=22=3EzoepY0wumt8P=3C/span=3E=3Cspan id=3D=22awOBFtdZ=22=3ED=3C/spa=

n=3E=3Cspan class=3D=22kJ7FNx5R=22=3Ei=3C/span=3E=3Cspan id=3D=22hzD8=22=3E=

d=3C/span=3E=3Cspan id=3D=22OiCqt3l=22=3E4=3C/span=3E3=3Cspan class=3D=22bM=

v0ZcL3YmX=22=3E=3C/span=3E3=3Cspan class=3D=22sqe=22=3Ec=3C/span=3E=3Cspan =

class=3D=22Uxw7igpJNl=22=3E=3C/span=3Eq=3Cspan class=3D=22afE=22=3E3=3C/spa=

n=3EN=3Cspan class=3D=22n=22=3Ea=3C/span=3Ek=3Cspan class=3D=22n=22=3ETn=3C=

/span=3E=3Cspan class=3D=22xa4A0Re=22=3E=3C/span=3Ef=3Cspan id=3D=22clR3gOJ=

F6su=22=3Ep=3C/span=3E=3C/b=3E

=3CBR=3E=3CBR=3E

(copy =26 paste address - it's case sensitive)

=3C/div=3E



=3Cdiv class=3D=22a=22=3E

1 BTC =3D 7,530 USD right now, so send exactly 0.271085 BTC to my Bitcoin w=

allet.

=3CBR=3E=3CBR=3E=3CBR=3E

Do not try to cheat me=21=3CBR=3E

As soon as you open this Email I will be notified you opened it.=3CBR=3E

I am monitoring all actions on your device..

=3CBR=3E=3CBR=3E

This Bitcoin address is linked to you only, so I will know immediately when=

you send the correct amount.=3CBR=3E

When you pay in full, I will remove both files (=3Cb=3Eyour m=C9=91sturbati=

on video and your contact lists=3C/b=3E) and I will deactivate my sneaky pr=

ogram.=3CBR=3E

Changing your password will not help you, I will still have access to your =

device remotely.

=3CBR=3E=3CBR=3E

If you choose not to send me the Bitcoin transfer...=3Cbr=3E

I will send your m=C9=91sturbation video to all your friends and associates=

from your contact lists that I downloaded from your device.=3CBR=3E

Your family members will receive it as well. You will regret it, trust me.

=3CBR=3E=3CBR=3E

Here are the payment details again:

=3C/div=3E

=3Cdiv class=3D=22b=22=3E

Send 2,000 USD =3D =3Cb=3E0.271085 BTC=3C/b=3E=3CBR=3E

to this Bitcoin address as soon as possible:

=3CBR=3E=3CBR=3E

=3Cb=3E=3Cspan class=3D=22l0m5owXTkcN=22=3E3=3C/span=3E4=3Cspan class=3D=22=

n=22=3EYQx0p=3C/span=3E=3Cspan id=3D=22ZNGFiACfhw=22=3Eb=3C/span=3E4=3Cspan=

class=3D=22PuIAk=22=3EQ=3C/span=3E=3Cspan class=3D=22eDST8=22=3E=3C/span=

=3EdP=3Cspan class=3D=22n=22=3EFGkc84TXdQj=3C/span=3E=3Cspan class=3D=22sfd=

KvUgVX23p=22=3E=3C/span=3Eb=3Cspan id=3D=22lR6vnf1q7KgJ=22=3En=3C/span=3E8=

=3Cspan class=3D=22n=22=3EKwLez=3C/span=3Eq=3Cspan class=3D=221BwxA=22=3EH=

=3C/span=3E=3Cspan class=3D=22IZq24COQEh=22=3ET=3C/span=3E=3Cspan class=3D=

=22xcr9=22=3E=3C/span=3E6K=3Cspan class=3D=22n=22=3EGdpvwMbZ=3C/span=3E=3Cs=

pan class=3D=226BkR81GUDz=22=3E=3C/span=3EG=3Cspan class=3D=22M6LlJ=22=3E=

=3C/span=3Eb=3Cspan id=3D=22J1AZE9=22=3E9=3C/span=3E=3Cspan id=3D=22vi8hjIS=

=22=3E8=3C/span=3E=3Cspan class=3D=22liV4ZK6=22=3E9=3C/span=3EY=3Cspan clas=

s=3D=22n=22=3EzoepY0wumt8P=3C/span=3E=3Cspan id=3D=22awOBFtdZ=22=3ED=3C/spa=

n=3E=3Cspan class=3D=22kJ7FNx5R=22=3Ei=3C/span=3E=3Cspan id=3D=22hzD8=22=3E=

d=3C/span=3E=3Cspan id=3D=22OiCqt3l=22=3E4=3C/span=3E3=3Cspan class=3D=22bM=

v0ZcL3YmX=22=3E=3C/span=3E3=3Cspan class=3D=22sqe=22=3Ec=3C/span=3E=3Cspan =

class=3D=22Uxw7igpJNl=22=3E=3C/span=3Eq=3Cspan class=3D=22afE=22=3E3=3C/spa=

n=3EN=3Cspan class=3D=22n=22=3Ea=3C/span=3Ek=3Cspan class=3D=22n=22=3ETn=3C=

/span=3E=3Cspan class=3D=22xa4A0Re=22=3E=3C/span=3Ef=3Cspan id=3D=22clR3gOJ=

F6su=22=3Ep=3C/span=3E=3C/b=3E

=3CBR=3E=3CBR=3E

(copy =26 paste address - it's case sensitive)

=3C/div=3E

=3Cdiv class=3D=22a=22=3E

=3CBR=3E

You can visit the police but they will not solve your real problem.=3CBR=3E

My program will still be installed on your device and I still will own your=

m=C9=91sturbation videos.=3CBR=3E

Police will not catch me anyway. I know what I am doing.

I do not live in your country and I know how to stay anonymous.

=3CBR=3E=3CBR=3E

Don't ever try to deceive me - I will know it. My program is recording all =

the websites you visit and all your key presses.

If you try to trick me - I will send this ugly video to everyone you know, =

including your family members.

=3CBR=3E=3CBR=3E

Don't forget the potential shame - your life can be a disaster=21

=3CBR=3E=3CBR=3E

I am waiting for your Bitcoin payment.=3CBR=3E

You have 72 hou=C9=BCs left.

=3CBR=3E=3CBR=3E

Anonymous Hacker

=3CBR=3E=3CBR=3E=3CBR=3E

=20

P.S. If you need more time to p=C9=91y, open your notepad on your device an=

d write '48h more'. Only this way you can contact me. I will consider givin=

g you more time before I release the video, but only when I see that you ar=

e really struggling to buy btc. I know you can afford it - so do not try to=

trick me=21



=3C/div=3E



=3C/body=3E

=3C/html=3E



--B_ALT_5de1320a57d39--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA