EVOLUTION-NINJA

Edit File: 1569413287.M55702P3126948.myaccount8.wpcpanel.com,S=6410,W=6550

Return-Path: <cleocoughlin@valving.loot.monster> Delivered-To: calandra@e24.com.au Received: from myaccount8.wpcpanel.com by myaccount8.wpcpanel.com with LMTP id Rfi3AqdYi12kti8AycIfzw (envelope-from <cleocoughlin@valving.loot.monster>) for <calandra@e24.com.au>; Wed, 25 Sep 2019 22:08:07 +1000 Return-path: <cleocoughlin@valving.loot.monster> Envelope-to: calandra@e24.com.au Delivery-date: Wed, 25 Sep 2019 22:08:07 +1000 Received: from mx.valving.loot.monster ([157.245.183.6]:56908) by myaccount8.wpcpanel.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92) (envelope-from <cleocoughlin@valving.loot.monster>) id 1iD65P-00D7O4-9U for calandra@e24.com.au; Wed, 25 Sep 2019 22:08:06 +1000 Received: from mx.valving.loot.monster (mx.valving.loot.monster [127.0.0.1]) by mx.valving.loot.monster (Postfix) with ESMTP id 46dcHL2dBVz22wq for <calandra@e24.com.au>; Wed, 25 Sep 2019 12:06:54 +0000 (UTC) Authentication-Results: mx.valving.loot.monster (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=valving.loot.monster DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= valving.loot.monster; h=content-transfer-encoding:content-type :content-type:mime-version:message-id:x-mailer:user-agent :reply-to:list-unsubscribe:subject:subject:to:from:from:date :date; s=dkim; t=1569413213; x=1572005214; bh=BxOGXRlagrH2pk9BD3 4Ok3ncjk+9Vx4oYV5f5tsjeGI=; b=IGN3LyB/HqZEZXN0/Fz2LpzacmlwjSbRsl BaIdGuQFP1N/D3zl+m/NkHPTq7JcfV3tv5qyKUBYxM3Zi++VCwMZlLbSoe6Xse4N cZzf4gNu8s2RYwRG0aOaequnrQgQZnxZy77ZvpgUTsy0WDp3sUYJv5rwjMFLjArz Cjsx2Xy68= X-Virus-Scanned: Debian amavisd-new at mx.valving.loot.monster Received: from mx.valving.loot.monster ([127.0.0.1]) by mx.valving.loot.monster (mx.valving.loot.monster [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o6icYic2pXCE for <calandra@e24.com.au>; Wed, 25 Sep 2019 12:06:53 +0000 (UTC) Received: from [127.0.0.1] (mx.valving.loot.monster [127.0.0.1]) by mx.valving.loot.monster (Postfix) with ESMTP id 46dc9k21Pfz22J5 for <calandra@e24.com.au>; Wed, 25 Sep 2019 12:02:02 +0000 (UTC) Date: Wed, 25 Sep 2019 13:02:01 +0100 From: "Cleo Coughlin" <cleocoughlin@valving.loot.monster> To: calandra@e24.com.au Subject: =?UTF-8?Q?Your=20personal=20data=20is=20at=20risk!=20Change=20your=20pas?= =?UTF-8?Q?sword=20immediately!?= List-Unsubscribe: <http://valving.loot.monster/unsub/MnJIMHpYTU4zd1J6N251czd6U01lMXltU1lsUFZvUG1FWjhLVi9SQ05wZUF0ZVRpeUZtMVVaaFVYS1lFbGhhd2x3TnJNSGNZWloyWjZ4Y0k2SVVEZW9NMEtscVVxcFdDT3NPVzU4cmM1Tlk9> Reply-To: <cleocoughlin@valving.loot.monster> User-Agent: CodeIgniter X-Sender: cleocoughlin@valving.loot.monster X-Mailer: CodeIgniter X-Priority: 3 (Normal) Message-ID: <5d8b573a09a32@valving.loot.monster> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=0.8 X-Spam-Score: 8 X-Spam-Bar: / X-Ham-Report: Spam detection software, running on the system "myaccount8.wpcpanel.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello! I am a representative of the Chaos hacking group. In the period from 30/06/2019 to 25/09/2019, we gained access to your account calandra@e24.com.au by hacking one of the E24.COM.AU mail servers. Content analysis details: (0.8 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: loot.monster] 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 TRACKER_ID BODY: Incorporates a tracking ID number -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Spam-Flag: NO Hello! I am a representative of the Chaos hacking group. In the period from 30/06/2019 to 25/09/2019, we gained access to your account calandra@e24.com.au by hacking one of the E24.COM.AU mail servers. Have you changed your password yet? Good! But our program intercepts it every time. And every time I we your new password! By accessing your email account, it was easy to connect to your device's operating system. At the moment all of your contacts are known to us. We also have access to your messengers and your correspondence. All this information is already stored on my pendrive. We are also aware of your intimate adventures on the Internet. We know that you love adult sites and we know about your sex addictions. You have very interesting and unique taste (do you understand what I mean?). When browsing these pages, your device's camera turns on automatically. What you watch is recorded and saved on our server. At the moment, several compromising video recordings have been collected. From the moment you read this letter, after 120 hours, all your contacts in this email inbox and in messengers will receive these clips and files along with correspondence. If you do not want this, transfer 2,500.00 AUD to our unique Bitcoin wallet. Send exactly: 0.20240129 BTC to our Bitcoin wallet: 3Q6L58z8Vmm5nLZrKMj45YEN7sPXkWG5bS The address is case-sensitive - copy it. As soon as your transfer is confirmed, all your contacts and video recording will automatically delete immediately. If no money arrives on time, the video and correspondence files will be sent to all your contacts. You decide ... Pay or live in hell with shame ... We believe that this whole story will teach you how to use the gadgets correctly! Everyone loves adult sites, but you are out of luck. For the future - just stick the sticker on your device's camera when visiting adult sites! Take care of yourself!