From messagee655d756bbadc@synergymedsys.com Sat Apr 17 08:03:03 2021 Return-path: Envelope-to: peter@bsdly.net Delivery-date: Sat, 17 Apr 2021 08:03:03 +0200 Received: from portal.nuug.no ([158.36.191.225]) by skapet.bsdly.net with esmtps (TLS1.3) tls TLS_CHACHA20_POLY1305_SHA256 (Exim 4.94) (envelope-from ) id 1lXe2l-000Lin-IQ for peter@bsdly.net; Sat, 17 Apr 2021 08:03:03 +0200 Received: from sg2nlsmtp01.shr.prod.sin2.secureserver.net ([182.50.132.200]) by portal.nuug.no with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94) (envelope-from ) id 1lXe2g-000DJs-Ln for peter@bsdly.net; Sat, 17 Apr 2021 08:02:59 +0200 Received: from sg2plcpnl0110.prod.sin2.secureserver.net ([182.50.135.54]) by : HOSTING RELAY : with ESMTP id Xdu5lgm4RTJb2Xdu5lGDBW; Fri, 16 Apr 2021 22:54:01 -0700 X-CMAE-Analysis: v=2.4 cv=XuE/hXJ9 c=1 sm=1 tr=0 ts=607a77f9 a=vJ1Vr4y4pI/7GX1LtJyEdQ==:117 a=rvvQ3l2HB4S41pU3LgPbbw==:17 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19 a=3YhXtTcJ-WEA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=KNMLWr6o6PTK6lMf3McA:9 a=CjuIK1q_8ugA:10 a=pHzHmUro8NiASowvMSCR:22 a=nt3jZW36AmriUCFCBwmW:22 X-SECURESERVER-ACCT: service@synergymedsys.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=synergymedsys.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:Subject:From:To:Date:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=SiTY7X2o4M7jPg0J5HLcVRaKvprA823AcmjRxIlw8Cc=; b=IcfAZPv+lkrU2RjaarahCMLyiM Fj6t0s2gHqgxYgkigAqGGezmIVUp/lSdWnV7jdrcXSxyb16PWHVNr4V9hBxIFJvxG2HPIYzHxwS/v kZg93UpStNTI0NZ5CRzA3I3RHAYXctAlZZIU+EaiStqS/M8VBFZ+4xAqdhy8+JDxLsKI8yLN3j4DE 22SWTo9X6mI8Toz6vT6nIzaPA4Y+bb2JKU3/KOHHxlEBlY8kVDnc+D2nIM8V2UdutjM0F+v38dPVB +hbM/Lo/S9ihUULE7oeDL8kgnDJTDygQD1+i13/Ho0Cjb9GKuMl9EObENtafF86YfbZBRVlU7q+P8 bvmfUmmw==; Received: from 59-120-178-164.hinet-ip.hinet.net ([59.120.178.164]:46108) by sg2plcpnl0110.prod.sin2.secureserver.net with esmtpa (Exim 4.93) (envelope-from ) id 1lXdu4-007X2R-Rw for peter@bsdly.net; Fri, 16 Apr 2021 22:54:01 -0700 Date: Sat, 17 Apr 2021 05:53:31 +0000 To: peter@bsdly.net From: Dillon Subject: Very important Message-ID: X-Mailer: PHPMailer 6.0.7 (https://github.com/PHPMailer/PHPMailer) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_rcPSY4Te352Bc1cOFjdBPgqJWcwuw0kEYJKGWwhU28" Content-Transfer-Encoding: 8bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - sg2plcpnl0110.prod.sin2.secureserver.net X-AntiAbuse: Original Domain - bsdly.net X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - synergymedsys.com X-Get-Message-Sender-Via: sg2plcpnl0110.prod.sin2.secureserver.net: authenticated_id: service@synergymedsys.com X-Authenticated-Sender: sg2plcpnl0110.prod.sin2.secureserver.net: service@synergymedsys.com X-Source: X-Source-Args: X-Source-Dir: X-CMAE-Envelope: MS4xfKqI/ZPWzimpE98k909TnXJYGXcvpDz+IqYk7fGeiDQ5g5zkJYCVYSsG6ORJpo4VYLlKsZpH+jEM1ORrx2ry5z7ns+qKOtRgQpG+CbybmrfiLMH7zokH ytX9F/p1EGqy8RG7ofxLkeZVxClnR5nNmKR83tZ7Y427PD2uiXNJkrhpcdmNXJy4zNuYAMsJTMoqN0mVzJZsPTdpPUqfpW+zg2Ll7lOhZqHgE9SPUHIuRw3L aT+HydpXkhjFKRMiB0pZhA== X-Spam_score: 7.5 X-Spam_score_int: 75 X-Spam_bar: +++++++ X-Spam_report: Spam detection software, running on the system "portal.nuug.no", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: So! OK, the story is, I know you watch P0RNOGRAPlC content ... and I have you REC0RDED in the same time you MASTURBATTE. Your smartphone got a VlRUS and your front CAMERRA turned on when... you know. I al [...] Content analysis details: (7.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 5.0 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5185] 0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [182.50.132.200 listed in list.dnswl.org] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 FUZZY_BITCOIN BODY: Obfuscated "Bitcoin" 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FUZZY_PORN Obfuscated "Pornography" or "Pornographic" 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.5 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.5 PDS_BTC_ID FP reduced Bitcoin ID 0.0 OBFU_BITCOIN Obfuscated BitCoin references X-Spam-Flag: YES X-New-Subject: *****SPAM***** Very important X-Spam_score: 7.5 X-Spam_score_int: 75 X-Spam_bar: +++++++ X-Spam_report: Spam detection software, running on the system "skapet.bsdly.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: So! OK, the story is, I know you watch P0RNOGRAPlC content ... and I have you REC0RDED in the same time you MASTURBATTE. Your smartphone got a VlRUS and your front CAMERRA turned on when... you know. I al [...] Content analysis details: (7.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 5.0 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5059] 0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [182.50.132.200 listed in list.dnswl.org] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 FUZZY_BITCOIN BODY: Obfuscated "Bitcoin" 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FUZZY_PORN Obfuscated "Pornography" or "Pornographic" 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.5 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.0 OBFU_BITCOIN Obfuscated BitCoin references 0.5 PDS_BTC_ID FP reduced Bitcoin ID Content analysis details: (7.5 points, 5.0 required, s/c no) X-Spam-Flag: YES X-New-Subject: *****SPAM***** Very important Status: RO Content-Length: 2767 Lines: 38 This is a multi-part message in MIME format. --b1_rcPSY4Te352Bc1cOFjdBPgqJWcwuw0kEYJKGWwhU28 Content-Type: text/plain; charset=us-ascii So! OK, the story is, I know you watch P0RNOGRAPlC content ... and I have you REC0RDED in the same time you MASTURBATTE. Your smartphone got a VlRUS and your front CAMERRA turned on when... you know. I also copied your contacts list + social contacts and if you don`t send me 800$ value in B-I-T C-0-I-N I will drop the video with you to your list of contacts. Do a search on Google for P-A-X-F-U-L and get the crypto coinz from there. My details are these and send that amount approximately: The Address: 1-B-f-9-G-w-v-K-6-n-Q-m-s-1-x-4-F-i-m-P-5-1-X-c-Y-8-b-B-v-F-r-g-3-D The Amount: 0.013 Ok so, you have to remove manually all the dashes from the address and you will obtain a string made of 34 numbers and letters that starts with "1" and ends with "D". Use that string of 34 chars to send the bribery. Also important is that addrs is Case Sensitive. I give you a few days to complete this. To remove my stuff from your device search for "How to reset to factory settings" and your device model. Also you should stop looking to this stuffs to avoid this kind of situation ... I`m just saying.. Once the bribery is sent the footage will be erased and that`s it. --b1_rcPSY4Te352Bc1cOFjdBPgqJWcwuw0kEYJKGWwhU28 Content-Type: text/html; charset=us-ascii

So!

OK, the story is, I know you watch P0RNOGRAPlC content ... and I have you REC0RDED in the same time you MASTURBATTE.

Your smartphone got a VlRUS and your front CAMERRA turned on when... you know. I also copied your contacts list + social contacts and if you don`t send me 800$ value in B-I-T C-0-I-N I will drop the video with you to your list of contacts. Do a search on Google for P-A-X-F-U-L and get the crypto coinz from there.

My details are these and send that amount approximately:

The Address: 1-B-f-9-G-w-v-K-6-n-Q-m-s-1-x-4-F-i-m-P-5-1-X-c-Y-8-b-B-v-F-r-g-3-D

The Amount: 0.013

Ok so, you have to remove manually all the dashes from the address and you will obtain a string made of 34 numbers and letters that starts with "1" and ends with "D". Use that string of 34 chars to send the bribery. Also important is that addrs is Case Sensitive.

I give you a few days to complete this. To remove my stuff from your device search for "How to reset to factory settings" and your device model.

Also you should stop looking to this stuffs to avoid this kind of situation ... I`m just saying..

Once the bribery is sent the footage will be erased and that`s it.

--b1_rcPSY4Te352Bc1cOFjdBPgqJWcwuw0kEYJKGWwhU28--