EVOLUTION-NINJA
Edit File: 1557532233.M504111P17834.myaccount8.wpcpanel.com,S=4460,W=4554:2,
Return-Path: <John12@4196.com> Delivered-To: kahlita@e24.com.au Received: from myaccount8.wpcpanel.com by myaccount8.wpcpanel.com with LMTP id tX6hG0kO1lyqRQAAycIfzw (envelope-from <John12@4196.com>) for <kahlita@e24.com.au>; Sat, 11 May 2019 09:50:33 +1000 Return-path: <John12@4196.com> Envelope-to: kahlita@e24.com.au Delivery-date: Sat, 11 May 2019 09:50:33 +1000 Received: from [41.59.53.140] (port=64338) by myaccount8.wpcpanel.com with smtp (Exim 4.91) (envelope-from <John12@4196.com>) id 1hPFHV-0004aI-3k for kahlita@e24.com.au; Sat, 11 May 2019 09:50:32 +1000 Received: from swrjrso ([69.231.49.58]) by 34959.com with MailEnable ESMTP; Fri, 10 May 2019 16:50:21 -0700 Received: (qmail 34959 invoked by uid 349); From: Got You<John12@4196.com> To: kahlita@e24.com.au Date: Fri, 10 May 2019 16:50:21 -0700 Message-ID: <349592.135473@34959.com> Mime-Version: 1.0 Content-type: text/plain; charset=utf-8; X-Spam-Status: Yes, score=4.3 X-Spam-Score: 43 X-Spam-Bar: ++++ X-Spam-Report: Spam detection software, running on the system "myaccount8.wpcpanel.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello! I know your pass is: saccok15 Because I infected you with a malware (RAT) / (Remote Administration Tool), some time ago and since then, I have been observing your actions. The malware gave me full access and control over your syst [...] Content analysis details: (4.3 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: blockchain.com] 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope X-Spam-Flag: YES Subject: ***SPAM*** Pervert - saccok15 Hello! I know your pass is: saccok15 Because I infected you with a malware (RAT) / (Remote Administration Tool), some time ago and since then, I have been observing your actions. The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won't even notice about it, yes such things exist, you can google it! I have also access to all your contacts, I collected everything private from you, pictures, videos, everything! Then I removed the malware again, right now it's no longer on your computer. I MADE FEW EMBARRASSING VIDEOS OF YOU (through your webcam), ONE SHOWING YOU MASTRUBATING!!! I can send the videos to all your contacts (email, social network) and publish all your private stuff everywhere! You can prevent me from doing this! Transfer exactly: 2000$ with the current bitcoin (BTC) price to my bitcoin address. If you don't know how to get bitcoin, Google - "How to buy Bitcoin", it's very simple for example with credit card. The wallet to receive and send bitcoins you can create here: www.login.blockchain.com/en/#/signup/ My bitcoin adress is: 1FqAEDNBFFjBZuVzk7V94tKgGwhVa8qABt Copy and paste my adress - it's (cAsE-sensitive). I give you few days time to get the bitcoins and pay, don't wait too long! After receiving the payment, I will delete everything from you and you can life your live in peace like before. I'm not feeling good doing this at all, but at the moment I got many problems and you know with money many problems can be solved, so solve yours now better too! Next time update your browser and scan files before open them on: virustotal.com, or you can analyse them here: hybrid-analysis.com Don't share this email with anyone, this should stay our little secret! MsgID: 1354731489