EVOLUTION-NINJA
Edit File: 1502812422.H154233P14516.myaccount1.wpcpanel.com,S=9218:2,
Return-path: <pmincorr@box1033.bluehost.com> Envelope-to: kahlita@e24.com.au Delivery-date: Wed, 16 Aug 2017 01:53:42 +1000 Received: from gproxy10-pub.mail.unifiedlayer.com ([69.89.20.226]:60504) by myaccount1.wpcpanel.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.87) (envelope-from <pmincorr@box1033.bluehost.com>) id 1dhe9w-0003jh-L0 for kahlita@e24.com.au; Wed, 16 Aug 2017 01:53:42 +1000 Received: from cmgw4 (unknown [10.0.90.85]) by gproxy10.mail.unifiedlayer.com (Postfix) with ESMTP id E39C7140429 for <kahlita@e24.com.au>; Tue, 15 Aug 2017 09:52:49 -0600 (MDT) Received: from box1033.bluehost.com ([69.195.124.233]) by cmgw4 with id xTsm1v00C52FVwM01Tspbb; Tue, 15 Aug 2017 09:52:49 -0600 X-Authority-Analysis: v=2.2 cv=ELV26xRC c=1 sm=1 tr=0 a=bHMQH+OLnPEWGwbUEerQzQ==:117 a=bHMQH+OLnPEWGwbUEerQzQ==:17 a=_rUPvBigxlUA:10 a=IkcTkHD0fZMA:10 a=x7bEGLp0ZPQA:10 a=KeKAF7QvOSUA:10 a=go2rnGL3qR-ruPz3XKUA:9 a=oXBRG7B1Yu51j_eu:21 a=3GgVFFzDg59wXez9:21 a=QEXdDO2ut3YA:10 a=-hIAUgOlb3gA:10 a=XhrVIO_ObGAA:10 Received: from pmincorr by box1033.bluehost.com with local (Exim 4.87) (envelope-from <pmincorr@box1033.bluehost.com>) id 1dhe98-001Uge-0j for kahlita@e24.com.au; Tue, 15 Aug 2017 09:52:46 -0600 To: kahlita@e24.com.au Subject: I have something that can make your life worse From: =?UTF-8?B?QXZhIEtpbmc=?= <matt@sueswintrealty.com> Reply-To: blenja.mamaevd@gmail.com MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Message-Id: <E1dhe98-001Uge-0j@box1033.bluehost.com> Date: Tue, 15 Aug 2017 09:52:46 -0600 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box1033.bluehost.com X-AntiAbuse: Original Domain - e24.com.au X-AntiAbuse: Originator/Caller UID/GID - [1988 1988] / [47 12] X-AntiAbuse: Sender Address Domain - box1033.bluehost.com X-BWhitelist: no X-Source-IP: X-Exim-ID: 1dhe98-001Uge-0j X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: X-Source-Auth: pmincorr X-Email-Count: 128 X-Source-Cap: cG1pbmNvcnI7cG1pbmNvcnI7Ym94MTAzMy5ibHVlaG9zdC5jb20= X-Local-Domain: yes X-Spam-Status: No, score=-1.1 X-Spam-Score: -10 X-Spam-Bar: - X-Ham-Report: Spam detection software, running on the system "myaccount1.wpcpanel.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello|Hi|Whats good|Whats up|Whats poppin|Good dayYou as well as everybody have been warned many times. But, obviously you didnt use internet carefuly|During all your life u was notified to surf web cautiously, but you didnt. Whats the metter?|Whats the problem?|wtf?|Whats happened?- You will ask me|U are thinking right now|You re guessing. So thats the thing|The whole point is|Lets start with the fact that I put|installed|placed|set|adjusted the virus|malicious soft on a web-site with videos|website with videos|webpage with videos for adults (Рorn web-page|site with pоrn content) (u|you know what Im talking about|whats up). Victim|Sacrifice|Object clicked on a play button|was watching video for adults|Tapped on the video and device started|began operating|functioning|working as dedicated desktop|rdp with keylogger function|supplied with keylogger. The rdp|remote desktop|dedicated desktop helped me to find this e-mail, I thought that you|u will|ll 100%|100 percent check thi s one|the work email. Moreover|Furthermore|So all cameras|cams and screen instantly|at the 1st onset|immediately started recording. Then|Further|After|Next my software|virus collected|got all ur|your contacts from messengers, e-mails and social networks. So what do we have now?|So whatsup? I made|created the|a split|double screen video|vid (first|1st part-screen rec.|record(u|you have a great|nice taste|interests lol|lmao), second|2nd part- cam|camera rec.|record) and all ur|your contacts. I think its not good news.| Thus|Accordingly|Hence|Consequently|So in my opinion|imho|I suppose that three hunned|320|305|290|two hunned ninety|three hundred fifteen usd is enough|plenty|sufficiently|fairly|reasonbly|adequately|satis for ur|this|that little|smallwee|petite mistake|false|error|fail|misstep. Here is| My bitcoin|btc(cryptocurrency) wallet address|wallet|address - 19qMSf287aNrX2WKkN9wWxFJJEXhrn67c7|1Q4PZ3Y63tF9REnnb2iJHVfiQ7hhsGbVAF|1Ar2K1zaz8Wq6FwiY78h3mQsdkDsHxbYkn|1HcGzVs [...] Content analysis details: (-1.1 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [69.89.20.226 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [69.89.20.226 listed in list.dnswl.org] -2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [69.89.20.226 listed in wl.mailspike.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 TO_NO_BRKTS_PCNT To: lacks brackets + percentage X-Spam-Flag: NO Hello|Hi|Whats good|Whats up|Whats poppin|Good dayYou as well as everybody have been warned many times. But, obviously you didnt use internet carefuly|During all your life u was notified to surf web cautiously, but you didnt. Whats the metter?|Whats the problem?|wtf?|Whats happened?- You will ask me|U are thinking right now|You re guessing. So thats the thing|The whole point is|Lets start with the fact that I put|installed|placed|set|adjusted the virus|malicious soft on a web-site with videos|website with videos|webpage with videos for adults (Рorn web-page|site with pоrn content) (u|you know what Im talking about|whats up). Victim|Sacrifice|Object clicked on a play button|was watching video for adults|Tapped on the video and device started|began operating|functioning|working as dedicated desktop|rdp with keylogger function|supplied with keylogger. The rdp|remote desktop|dedicated desktop helped me to find this e-mail, I thought that you|u will|ll 100%|100 percent check thi s one|the work email. Moreover|Furthermore|So all cameras|cams and screen instantly|at the 1st onset|immediately started recording. Then|Further|After|Next my software|virus collected|got all ur|your contacts from messengers, e-mails and social networks. So what do we have now?|So whatsup? I made|created the|a split|double screen video|vid (first|1st part-screen rec.|record(u|you have a great|nice taste|interests lol|lmao), second|2nd part- cam|camera rec.|record) and all ur|your contacts. I think its not good news.| Thus|Accordingly|Hence|Consequently|So in my opinion|imho|I suppose that three hunned|320|305|290|two hunned ninety|three hundred fifteen usd is enough|plenty|sufficiently|fairly|reasonbly|adequately|satis for ur|this|that little|smallwee|petite mistake|false|error|fail|misstep. Here is| My bitcoin|btc(cryptocurrency) wallet address|wallet|address - 19qMSf287aNrX2WKkN9wWxFJJEXhrn67c7|1Q4PZ3Y63tF9REnnb2iJHVfiQ7hhsGbVAF|1Ar2K1zaz8Wq6FwiY78h3mQsdkDsHxbYkn|1HcGzVs 2UrnecjdsZ6KpVM2T4PZUgU1rpE|1JWkbfXnZofiYA3r66rdP2KoQXgEhz2NXq|1A9b941uqAa6u9DHRWZy4rzEieSgW16Dde|17icrFiVyirDvirZKRMrC1MxHmoL2D7Stw|1ATSZwy4VEYv4Bd83k948YT54NkS78HhMS|1JK61NqcyTQvxgHEaSonyABW65odZxY75M|1F542cPpwE26kwhf1NG5jtjBXRdEmDAequ|15RrKYeL1nmkjjWe1WDJ99JK56f2qFsBbh(address should be without \"space\" or this \"=\" digit). Ask internet how to buy|use it. It isnt|is not very hard. Just write \"how to buy|how to get|Where can I get btc|bitcoins\" Ill wait|Ull have|I give u 1|one day after|upon|since opening|reading this letter|message(I installed|placed|set|adjusted|put a special|tracking pixel in it, Ill know|see when you read|open it). If you dont send me|I don\'t recieve my btc|my bitcoins|the necessary amount Ill send video with you to all your contacts|All your contacts will recieve video with you When|Since|Upon I receive|get bitcoin|btc- the сompromising evidence| will be deleted|erased|destroyed.If u want|desire|wish|ask|require|charge me to send|show|give evidence|proofs, reply yes|+|yeah and Ill send this video to three contacts|share video that I made with 3 contacts Ive collected from you|u. Can go to cops|police, but finding me will take longer than one day|they will not have time to find me |for a one day they can not cope|searching me is more long-lasting than 1 day, im foreign|U kranian|Romanian|from Kazahstan|European|from France|from Germany|from UK|from Thailand|from Belarus|from Argentina, so you will|ull be shamed af|a star among friends.