Bitcoin Extortion Scam

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 12 Aug 2018 20:07:33 -0700
Received: from mail.fayenorris.com ([46.161.42.98]:37029)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fp3Cd-0000og-Nj
for ; Sun, 12 Aug 2018 20:07:33 -0700
From: "Violet" <info>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0 (1.0)
Message-Id: <728995FE-D63E-F980-3C7F-286A3C8C4BD0@>
Date: Sun, 12 Aug 2018 20:06:49 -0700
To:
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears to be that, (), is your password. You may not know
me and you are probably wondering why you are getting this e mail, right?
actually, I setup a spyware on the adult videos (adult) website and guess
what happens, you visited this web site to have fun (you know very well what
What i'm saying is). While you were watching videos, your internet browser
started off functioning like a RDP (Remote Desktop) which gave me accessibility
of your screen and webcam. from then on, my software programs obtained all
of your contacts from the Messenger, Outlook, Facebook, as well as emails.
[...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.98 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.98 listed in bl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.98 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.98>]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears to be that, (), is your password. You may not know me and you are
probably wondering why you are getting this e mail, right?

actually, I setup a spyware on the adult videos (adult) website and guess what
happens, you visited this web site to have fun (you know very well what What i'm
saying is). While you were watching videos, your internet browser started off
functioning like a RDP (Remote Desktop) which gave me accessibility of your screen
and webcam. from then on, my software programs obtained all of your contacts from
the Messenger, Outlook, Facebook, as well as emails.

What did I really do?

I created a double-screen video recording. First part shows the video you were
seeing (you have a good taste haha . . .), and Second part shows the recording of
your webcam.

exactly what should you do?

Well, I think, $1100 is a fair price for your little hidden secret. You will make
the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in
Google).

BTC Address: 1Fzdm8iWh2vWdKtoeDTNqmBdc1HMYvw4Rr
(It's case sensitive, so copy and paste it)

Very important:
You have one day to make the payment. (I have a special pixel within this e mail,
and at this moment I am aware that you've read through this email message). If I
don't get the BitCoins, I will certainly send your videos to all of your contacts
including family members, coworkers, and so forth. Having said that, if I get the
payment, I'll destroy the video immidiately. If you need evidence, reply with "Yes!"
and i'll undoubtedly send your video recording to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 12 Aug 2018 22:44:20 -0700
Received: from mail.fayenorris.com ([46.161.42.98]:55373)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fp5eM-00027G-Mx
for ; Sun, 12 Aug 2018 22:44:20 -0700
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: "Marla" <info>
Date: Sun, 12 Aug 2018 22:43:36 -0700
Message-Id: <CC6EFC2F-6E00-9401-70CF-07A00B5E7B70@>
To:
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), is your password. You might not know
me and you are probably wondering why you're getting this e-mail, right? in
fact, I setup a trojans over the adult videos (porno) web site and guess
what, you visited this website to have fun (you know what I mean). While you
were watching videos, your internet browser started out functioning as a
RDP (Remote Desktop) which gave me accessibility of your screen and web camera.
and then, my computer software obtained all your contacts from your Messenger,
Outlook, Facebook, in addition to emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.98 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.98 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.98>]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.98 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears that, (), is your password. You might not know me and you are probably
wondering why you're getting this e-mail, right?

in fact, I setup a trojans over the adult videos (porno) web site and guess what,
you visited this website to have fun (you know what I mean). While you were watching
videos, your internet browser started out functioning as a RDP (Remote Desktop)
which gave me accessibility of your screen and web camera. and then, my computer
software obtained all your contacts from your Messenger, Outlook, Facebook, in
addition to emails.

What did I do?

I created a double-screen video recording. 1st part shows the recording you're
watching (you have a good taste haha . . .), and Second part shows the recording of
your web cam.

exactly what should you do?

Well, in my opinion, $1100 is a fair price for our little hidden secret. You'll make
the payment by Bitcoin (if you don't know this, search "how to buy bitcoin" in
Google).

BTC Address: 18Kg2iGLATrqCQgy5YNAXjxQnf9LX72oDr
(It's case sensitive, so copy and paste it)

Important:
You have 5 days to make the payment. (I have a unique pixel within this e mail, and
at this moment I know that you have read this email message). If I don't get the
BitCoins, I will certainly send your video recording to all of your contacts
including family members, coworkers, and so on. Having said that, if I get the
payment, I'll destroy the video immidiately. If you'd like evidence, reply with
"Yes!" and I will certainly send out your video recording to your 6 contacts. It is
a non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.

It appears that, (), 's your password. You might not know me and you are most likely
wondering why you're getting this e mail, right?

in fact, I put in place a trojans over the adult vids (porno) web-site and guess
what, you visited this website to have fun (you know very well what I mean). When
you were watching videos, your internet browser started out functioning like a RDP
(Team Viewer) which gave me accessibility of your screen and web camera. and then,
my computer software obtained all of your current contacts from the Messenger,
Microsoft outlook, Facebook, along with emails.

What did I actually do?

I made a double-screen video clip. 1st part shows the recording you're watching (you
have a good taste haha . . .), and 2nd part shows the recording of your webcam.

exactly what should you do?

Well, in my opinion, $1200 is a reasonable price for our little hidden secret.
You'll make the payment by Bitcoin (if you do not know this, search "how to buy
bitcoin" in Google).

Bitcoin Address: 1An5Mo2UZWrC2RAmtZStAeC5paTRij2K23
(It is case sensitive, so copy and paste it)

Very important:
You've few days in order to make the payment. (I've a completely unique pixel within
this e mail, and at this moment I know you have read through this email message). If
I don't get the BitCoins, I will certainly send your videos to all of your contacts
including family, colleagues, and so forth. Having said that, if I get the payment,
I'll destroy the recording immidiately. If you want evidence, reply with "Yes!" and
I will definitely send your video recording to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 04:15:49 -0700
Received: from mail.rosieweber.com ([46.161.42.100]:57964)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpAp9-0005H8-Nj
for ; Mon, 13 Aug 2018 04:15:49 -0700
From: "Marcy" <info>
To:
Message-ID: <C06E6E37.7CF4ADFD05DC0027@>
Importance: Normal
Date: Mon, 13 Aug 2018 04:15:05 -0700
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears to be that, (), is your password. May very well
not know me and you are most likely wondering why you're getting this e-mail,
right? actually, I put in place a malware on the adult videos (adult) web
site and guess what happens, you visited this web site to have fun (you know
what I mean). When you were watching videos, your internet browser started
out operating as a RDP (Team Viewer) which provided accessibility of your
screen and web camera. after that, my computer software obtained all of your
contacts from your Messenger, Microsoft outlook, Facebook, along with emails.
[...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.100 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.100 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.100>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.100 listed in bl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears to be that, (), is your password. May very well not know me and you are
most likely wondering why you're getting this e-mail, right?

actually, I put in place a malware on the adult videos (adult) web site and guess
what happens, you visited this web site to have fun (you know what I mean). When you
were watching videos, your internet browser started out operating as a RDP (Team
Viewer) which provided accessibility of your screen and web camera. after that, my
computer software obtained all of your contacts from your Messenger, Microsoft
outlook, Facebook, along with emails.

What did I really do?

I created a double-screen video clip. First part shows the video you are watching
(you have got a good taste haha . . .), and 2nd part shows the recording of your web
camera.

exactly what should you do?

Well, I think, $1300 is really a reasonable price for our little secret. You'll make
the payment by Bitcoin (if you do not know this, search "how to purchase bitcoin" in
Google).

Bitcoin Address: 1YrEw8oxEDs1H2RERZ2Rn7meRt9qB6oy2
(It is case sensitive, so copy and paste it)

Very important:
You've got 5 days to make the payment. (I've a unique pixel within this e-mail, and
at this moment I know you have read this email message). If I don't get the
BitCoins, I will certainly send your video recording to all of your contacts
including family, colleagues, and so forth. Having said that, if I get the payment,
I'll destroy the video immidiately. If you want evidence, reply with "Yes!" and i'll
certainly send your videos to your 6 contacts. It is a non-negotiable offer, that
being said don't waste my personal time and yours by responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 09:40:38 -0700
Received: from mail.joannaleonard.com ([46.161.42.99]:58567)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpFtV-0008Ro-Ax
for ; Mon, 13 Aug 2018 09:40:38 -0700
To:
From: "Arlene" <info>
Date: Mon, 13 Aug 2018 09:39:54 -0700
Importance: normal
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Message-ID: <sqfg8u0-w3qj0e-24@>
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), is your password. You may not know me
and you are most likely wondering why you're getting this e mail, right?
in fact, I setup a spyware over the adult vids (porno) web-site and guess
what happens, you visited this site to have fun (you know very well what I
mean). Whilst you were watching videos, your internet browser began operating
like a RDP (Remote Desktop) which gave me accessibility of your screen and
web cam. from then on, my computer software obtained all your contacts from
your Messenger, Microsoft outlook, FB, along with emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.99 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.99>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.99 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.99 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears that, (), is your password. You may not know me and you are most likely
wondering why you're getting this e mail, right?

in fact, I setup a spyware over the adult vids (porno) web-site and guess what
happens, you visited this site to have fun (you know very well what I mean). Whilst
you were watching videos, your internet browser began operating like a RDP (Remote
Desktop) which gave me accessibility of your screen and web cam. from then on, my
computer software obtained all your contacts from your Messenger, Microsoft outlook,
FB, along with emails.

What did I do?

I created a double-screen video recording. 1st part shows the video you were seeing
(you have got a good taste haha . . .), and Second part shows the recording of your
web cam.

exactly what should you do?

Well, in my opinion, $1300 is really a fair price for your little hidden secret.
You'll make the payment by Bitcoin (if you do not know this, search "how to buy
bitcoin" search engines like google).

Bitcoin Address: 13B1bGQTy1rZivfU4ryHhDQ8SUqhEqSiDw
(It is case sensitive, so copy and paste it)

Important:
You have 3 days to make the payment. (I have a special pixel in this e-mail, and at
this moment I am aware that you've read this email message). If I do not get the
BitCoins, I will certainly send your videos to all of your contacts including family
members, co-workers, and so forth. Having said that, if I receive the payment, I'll
destroy the recording immidiately. If you'd like evidence, reply with "Yes!" and I
will undoubtedly mail out your videos to your 6 contacts. It is a non-negotiable
offer, that being said don't waste my personal time and yours by answering this
message.

It appears to be that, (), is your password. May very well not know me and you are
most likely wondering why you're getting this e-mail, right?

actually, I put in place a malware over the adult vids (adult) web-site and guess
what, you visited this website to have fun (you really know what What i'm saying
is). While you were watching videos, your internet browser started off operating
like a RDP (Remote Desktop) which provided me accessibility to your screen and web
camera. after that, my software programs obtained your entire contacts out of your
Messenger, Outlook, Facebook, as well as emails.

What did I really do?

I made a double-screen video. First part shows the recording you are watching (you
have a good taste haha . . .), and Second part shows the recording of your webcam.

what exactly should you do?

Well, I think, $1300 is a reasonable price for your little hidden secret. You will
make the payment by Bitcoin (if you do not know this, search "how to purchase
bitcoin" search engines like google).

Bitcoin Address: 1EYYUna6VYC38WXAphc9hAKufNiuXhRzUd
(It's case sensitive, so copy and paste it)

Important:
You've got 5 days to make the payment. (I've a completely unique pixel in this
e-mail, and at this moment I am aware that you have read through this email
message). If I do not get the BitCoins, I will certainly send out your videos to all
of your contacts including family, coworkers, and so forth. Having said that, if I
receive the payment, I'll destroy the video immidiately. If you need evidence, reply
with "Yes!" and i'll undoubtedly mail out your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 14:23:08 -0700
Received: from mail.fayenorris.com ([46.161.42.98]:42338)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpKIq-0002Vx-7v
for ; Mon, 13 Aug 2018 14:23:08 -0700
To: \
From: "Robert" <info>
Date: Mon, 13 Aug 2018 14:22:23 -0700
Importance: normal
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Message-ID: <zzs1h7r-rt8zqv-4A@>
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), 's your password. You may not know me
and you are most likely wondering why you are getting this e-mail, right?
in fact, I put in place a malware over the adult videos (adult) website and
guess what happens, you visited this web site to have fun (you know what
I am talking about). Whilst you were watching videos, your internet browser
started out operating like a RDP (Remote Desktop) which provided me accessibility
of your screen and webcam. after that, my software program obtained your
complete contacts from the Messenger, Microsoft outlook, FB, along with emails.
[...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.98 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.98 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.98>]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.98 listed in bl.score.senderscore.com]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :



It appears that, (), 's your password. You may not know me and you are most likely
wondering why you are getting this e-mail, right?

in fact, I put in place a malware over the adult videos (adult) website and guess
what happens, you visited this web site to have fun (you know what I am talking
about). Whilst you were watching videos, your internet browser started out operating
like a RDP (Remote Desktop) which provided me accessibility of your screen and
webcam. after that, my software program obtained your complete contacts from the
Messenger, Microsoft outlook, FB, along with emails.

What did I actually do?

I produced a double-screen video clip. Very first part shows the video you were
seeing (you have a good taste haha . . .), and 2nd part shows the recording of your
webcam.

what exactly should you do?

Well, I think, $1300 is a fair price for your little secret. You'll make the payment
by Bitcoin (if you do not know this, search "how to buy bitcoin" search engines like
google).

BTC Address: 1EnS7RVKwXwSbC2f19N6Gv13cXs9aX2Kd6
(It's case sensitive, so copy and paste it)

Important:
You've few days to make the payment. (I've a unique pixel in this e mail, and at
this moment I am aware you have read this email message). If I don't get the
BitCoins, I will certainly send out your video recording to all of your contacts
including family members, coworkers, and so on. Having said that, if I receive the
payment, I'll destroy the recording immidiately. If you'd like evidence, reply with
"Yes!" and I will definitely send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 16:49:32 -0700
Received: from mail.candicemanning.com ([46.161.42.101]:45941)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpMaU-0004ST-6L
for ; Mon, 13 Aug 2018 16:49:31 -0700
Date: Mon, 13 Aug 2018 16:48:38 -0700
From: "Janna" <info>
To:
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Message-ID: <pyti2an-auf3ae-B0@>
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), 's your password. You might not know
me and you are most likely wondering why you are getting this e-mail, right?
actually, I put in place a malware on the adult vids (adult) web site and
guess what happens, you visited this website to have fun (you really know
what I mean). While you were watching videos, your internet browser started
off operating like a RDP (Remote Access) which provided accessibility of
your screen and web cam. from then on, my computer software obtained your
entire contacts from your Messenger, Microsoft outlook, Facebook, in addition
to emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.101 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.101 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.101>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.101 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears that, (), 's your password. You might not know me and you are most likely
wondering why you are getting this e-mail, right?

actually, I put in place a malware on the adult vids (adult) web site and guess what
happens, you visited this website to have fun (you really know what I mean). While
you were watching videos, your internet browser started off operating like a RDP
(Remote Access) which provided accessibility of your screen and web cam. from then
on, my computer software obtained your entire contacts from your Messenger,
Microsoft outlook, Facebook, in addition to emails.

What did I really do?

I created a double-screen video. 1st part shows the recording you were seeing (you
have a good taste haha . . .), and Second part shows the recording of your webcam.

what exactly should you do?

Well, in my opinion, $1300 is really a reasonable price for your little hidden
secret. You will make the payment by Bitcoin (if you do not know this, search "how
to purchase bitcoin" search engines like google).

Bitcoin Address: 1ATeMGNr69A8fu4W6TurJ1j9yN7VMgv5SD
(It's case sensitive, so copy and paste it)

Very important:
You have some days to make the payment. (I have a completely unique pixel in this e
mail, and at this moment I know you have read through this email message). If I do
not get the BitCoins, I will certainly send out your video recording to all of your
contacts including relatives, coworkers, and so on. Having said that, if I get the
payment, I'll destroy the recording immidiately. If you want evidence, reply with
"Yes!" and i'll undoubtedly mail out your video recording to your 6 contacts. It is
a non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Viewing Full Header - View message
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 19:36:49 -0700
Received: from mail.candicemanning.com ([46.161.42.101]:34331)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpPCR-0005yx-Gf
for ; Mon, 13 Aug 2018 19:36:49 -0700
Date: Mon, 13 Aug 2018 19:36:06 -0700
From: "Kristie" <info>
To:
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Message-ID: <i39sdq4-az1uyu-E7@>
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), 's your password. May very well not know
me and you are most likely wondering why you're getting this e-mail, right?
actually, I setup a malware on the adult vids (adult porn) web site and guess
what, you visited this web site to have fun (you really know what What i'm
saying is). Whilst you were watching videos, your internet browser started
out working like a RDP (Remote Access) which provided me accessibility of
your screen and web cam. after that, my software program obtained all of
your current contacts from the Messenger, Microsoft outlook, Facebook, in
addition to emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.101 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.101 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.101>]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.101 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :



It appears that, (), 's your password. May very well not know me and you are most
likely wondering why you're getting this e-mail, right?

actually, I setup a malware on the adult vids (adult porn) web site and guess what,
you visited this web site to have fun (you really know what What i'm saying is).
Whilst you were watching videos, your internet browser started out working like a
RDP (Remote Access) which provided me accessibility of your screen and web cam.
after that, my software program obtained all of your current contacts from the
Messenger, Microsoft outlook, Facebook, in addition to emails.

What did I really do?

I created a double-screen video. First part shows the video you were seeing (you
have got a good taste haha . . .), and Second part shows the recording of your web
camera.

what exactly should you do?

Well, I think, $1300 is a fair price for your little secret. You'll make the payment
by Bitcoin (if you don't know this, search "how to purchase bitcoin" search engines
like google).

BTC Address: 1B9Cm4AYKAwanpA4HpSJQ3sX4drn7vTs83
(It's case sensitive, so copy and paste it)

Important:
You've got one day to make the payment. (I've a unique pixel within this e-mail, and
at this moment I am aware that you've read through this email message). If I do not
get the BitCoins, I will certainly send out your video recording to all of your
contacts including relatives, coworkers, and so forth. Having said that, if I
receive the payment, I'll destroy the video immidiately. If you want evidence, reply
with "Yes!" and i'll undoubtedly send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2018 22:43:24 -0700
Received: from mail.candicemanning.com ([46.161.42.101]:38726)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpS6z-0007lH-G7
for ; Mon, 13 Aug 2018 22:43:23 -0700
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: "Geraldine" <info>
Date: Mon, 13 Aug 2018 22:42:39 -0700
Message-Id: <6A200084-40C0-31A1-EDBA-EAB72E775AF6@>
To:
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears to be that, (), is your password. Will possibly
not know me and you are most likely wondering why you're getting this e-mail,
right? in fact, I setup a viruses on the adult videos (adult) web site and
guess what happens, you visited this website to have fun (you really know
what I mean). Whilst you were watching videos, your internet browser began
operating like a RDP (Team Viewer) which provided accessibility of your screen
and webcam. from then on, my software programs obtained your complete contacts
from your Messenger, Outlook, Facebook, in addition to emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.101 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.101 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.101 listed in bl.mailspike.net]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.101>]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears to be that, (), is your password. Will possibly not know me and you are
most likely wondering why you're getting this e-mail, right?

in fact, I setup a viruses on the adult videos (adult) web site and guess what
happens, you visited this website to have fun (you really know what I mean). Whilst
you were watching videos, your internet browser began operating like a RDP (Team
Viewer) which provided accessibility of your screen and webcam. from then on, my
software programs obtained your complete contacts from your Messenger, Outlook,
Facebook, in addition to emails.

What did I actually do?

I created a double-screen video. Very first part shows the recording you were seeing
(you've got a good taste haha . . .), and 2nd part shows the recording of your web
camera.

exactly what should you do?

Well, I think, $1300 is really a reasonable price for our little secret. You will
make the payment by Bitcoin (if you do not know this, search "how to purchase
bitcoin" in Google).

Bitcoin Address: 1KnCDietzXpGks6YccmS12noBdkf5ugKov
(It's case sensitive, so copy and paste it)

Important:
You've got one day in order to make the payment. (I have a unique pixel within this
e-mail, and at this moment I know that you have read through this email message). If
I do not get the BitCoins, I will certainly send your videos to all of your contacts
including family members, colleagues, and so on. Having said that, if I receive the
payment, I'll destroy the recording immidiately. If you want evidence, reply with
"Yes!" and I will undoubtedly send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2018 01:13:45 -0700
Received: from mail.candicemanning.com ([46.161.42.101]:56605)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpUSQ-0000kX-GV
for ; Tue, 14 Aug 2018 01:13:45 -0700
To:
From: "Gwendolyn" <info>
Message-ID: <3D1C9FE3.8053587@>
Date: Tue, 14 Aug 2018 01:12:57 -0700
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101
Thunderbird/38.0.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: Yes, score=21.2
X-Spam-Score: 212
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), 's your password. Will possibly not know
me and you are most likely wondering why you are getting this e-mail, right?
in fact, I setup a spyware on the adult videos (porno) web site and guess
what, you visited this website to have fun (you really know what I am talking
about). When you were watching videos, your internet browser started off
functioning like a RDP (Team Viewer) which provided accessibility to your
screen and web camera. from then on, my software programs obtained all your
contacts from your Messenger, Microsoft outlook, Facebook, in addition to
emails. [...]

Content analysis details: (21.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.101 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.101>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.101 listed in bl.score.senderscore.com]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.101 listed in bl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.3 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears that, (), 's your password. Will possibly not know me and you are most
likely wondering why you are getting this e-mail, right?

in fact, I setup a spyware on the adult videos (porno) web site and guess what, you
visited this website to have fun (you really know what I am talking about). When you
were watching videos, your internet browser started off functioning like a RDP (Team
Viewer) which provided accessibility to your screen and web camera. from then on, my
software programs obtained all your contacts from your Messenger, Microsoft outlook,
Facebook, in addition to emails.

What did I actually do?

I made a double-screen video recording. 1st part shows the recording you are
watching (you have got a good taste haha . . .), and 2nd part shows the recording of
your web camera.

exactly what should you do?

Well, in my opinion, $1100 is really a fair price for our little hidden secret. You
will make the payment by Bitcoin (if you do not know this, search "how to purchase
bitcoin" search engines like google).

Bitcoin Address: 132q4Gdrr4scMCa78YFpJhPsywBvpiaxRm
(It is case sensitive, so copy and paste it)

Very important:
You've got one day to make the payment. (I've a unique pixel within this e mail, and
at this moment I know that you've read this email message). If I do not get the
BitCoins, I will certainly send out your videos to all of your contacts including
family members, coworkers, and so on. Having said that, if I get the payment, I'll
destroy the video immidiately. If you need evidence, reply with "Yes!" and i'll
undoubtedly send your videos to your 6 contacts. It is a non-negotiable offer, that
being said don't waste my personal time and yours by responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2018 04:03:48 -0700
Received: from mail.rosieweber.com ([46.161.42.100]:37716)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpX70-0002IP-BS
for ; Tue, 14 Aug 2018 04:03:48 -0700
To:
From: "Yvonne" <info>
Date: Tue, 14 Aug 2018 04:02:30 -0700
Importance: normal
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Message-ID: <kdcwtju-0k666n-AA@>
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), 's your password. You might not know
me and you are probably wondering why you are getting this e-mail, right?
actually, I put in place a spyware on the adult videos (porno) web-site and
guess what happens, you visited this site to have fun (you really know what
I am talking about). Whilst you were watching videos, your internet browser
began functioning as a RDP (Remote Desktop) which gave me accessibility to
your screen and web camera. after that, my computer software obtained your
entire contacts from your Messenger, Microsoft outlook, Facebook, as well
as emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.100 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.100>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.100 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.100 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It appears that, (), 's your password. You might not know me and you are probably
wondering why you are getting this e-mail, right?

actually, I put in place a spyware on the adult videos (porno) web-site and guess
what happens, you visited this site to have fun (you really know what I am talking
about). Whilst you were watching videos, your internet browser began functioning as
a RDP (Remote Desktop) which gave me accessibility to your screen and web camera.
after that, my computer software obtained your entire contacts from your Messenger,
Microsoft outlook, Facebook, as well as emails.

What did I actually do?

I created a double-screen video recording. First part shows the recording you're
seeing (you've got a good taste haha . . .), and Second part shows the recording of
your webcam.

what exactly should you do?

Well, in my opinion, $1200 is a fair price for your little hidden secret. You'll
make the payment by Bitcoin (if you don't know this, search "how to buy bitcoin" in
Google).

BTC Address: 17Bd4tkQQqqvq3WnyVhfk8eUoVx4gWrKmf
(It is case sensitive, so copy and paste it)

Very important:
You have 1 day in order to make the payment. (I have a completely unique pixel
within this e-mail, and at this moment I know that you have read this email
message). If I don't get the BitCoins, I will certainly send your videos to all of
your contacts including relatives, colleagues, and so on. Having said that, if I
receive the payment, I'll destroy the video immidiately. If you need evidence, reply
with "Yes!" and I will undoubtedly send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2018 07:24:00 -0700
Received: from mail.fayenorris.com ([46.161.42.98]:56723)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fpaEm-0004R2-0b
for Tue, 14 Aug 2018 07:24:00 -0700
From: "Angela" <info>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0 (1.0)
Message-Id: <2CBD5165-A010-F180-1E0B-5A81C72DBFE0@>
Date: Tue, 14 Aug 2018 07:23:14 -0700
To:
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), is your password. May very well not know
me and you are probably wondering why you're getting this e-mail, right?
actually, I put in place a malware on the adult vids (adult porn) website
and you know what, you visited this website to have fun (you know very well
what What i'm saying is). During the time you were watching videos, your
internet browser began working like a RDP (Remote Access) which provided me
accessibility to your screen and webcam. after that, my software program
obtained all of your current contacts from the Messenger, Outlook, FB, as
well as emails. [...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.98 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.98 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.98>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.98 listed in bl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :

It appears that, (), is your password. May very well not know me and you are
probably wondering why you're getting this e-mail, right?

actually, I put in place a malware on the adult vids (adult porn) website and you
know what, you visited this website to have fun (you know very well what What i'm
saying is). During the time you were watching videos, your internet browser began
working like a RDP (Remote Access) which provided me accessibility to your screen
and webcam. after that, my software program obtained all of your current contacts
from the Messenger, Outlook, FB, as well as emails.

What did I actually do?

I produced a double-screen video. 1st part shows the recording you're watching
(you've got a good taste haha . . .), and Second part shows the recording of your
web cam.

exactly what should you do?

Well, I think, $1100 is a reasonable price for your little secret. You'll make the
payment by Bitcoin (if you do not know this, search "how to purchase bitcoin" search
engines like google).

BTC Address: 1E7cybkZUBHX8kd3CrxVpFBQx6JyqGxytY
(It is case sensitive, so copy and paste it)

Very important:
You've got 3 days in order to make the payment. (I've a special pixel within this
e-mail, and at this moment I am aware you have read this email message). If I do not
get the BitCoins, I will certainly send out your videos to all of your contacts
including relatives, coworkers, and so forth. Having said that, if I get the
payment, I'll destroy the recording immidiately. If you need evidence, reply with
"Yes!" and I will definitely send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2018 19:29:14 -0700
Received: from mail.joannaleonard.com ([46.161.42.99]:44400)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fplYb-0001yg-Cg
for ; Tue, 14 Aug 2018 19:29:14 -0700
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: "Gayle" <info>
Date: Tue, 14 Aug 2018 19:28:28 -0700
Message-Id: <7AE9FED9-8C39-6B1E-1CF9-28B1E44F45BF@>
To:
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It appears that, (), is your password. May very well not know
me and you are most likely wondering why you are getting this e-mail, right?
actually, I put in place a viruses on the adult vids (adult porn) web site
and guess what, you visited this website to have fun (you really know what
I am talking about). During the time you were watching videos, your internet
browser started out working like a RDP (Remote Access) which provided accessibility
of your screen and web cam. and then, my computer software obtained your
entire contacts out of your Messenger, Microsoft outlook, FB, as well as emails.
[...]

Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.99>]
-0.0 SPF_PASS SPF: sender matches SPF record
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.99 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.99 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.99 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :

It appears that, (), is your password. May very well not know me and you are most
likely wondering why you are getting this e-mail, right?

actually, I put in place a viruses on the adult vids (adult porn) web site and guess
what, you visited this website to have fun (you really know what I am talking
about). During the time you were watching videos, your internet browser started out
working like a RDP (Remote Access) which provided accessibility of your screen and
web cam. and then, my computer software obtained your entire contacts out of your
Messenger, Microsoft outlook, FB, as well as emails.

What did I do?

I produced a double-screen video. First part shows the video you were seeing (you've
got a good taste haha . . .), and 2nd part shows the recording of your web camera.

exactly what should you do?

Well, I think, $1200 is really a fair price for your little secret. You will make
the payment by Bitcoin (if you do not know this, search "how to purchase bitcoin"
search engines like google).

Bitcoin Address: 19SHVLE5AWS9BRA5nxw6XxhDMgsbfGfD1o
(It is case sensitive, so copy and paste it)

Important:
You've some days in order to make the payment. (I've a special pixel in this e mail,
and at this moment I am aware you have read this email message). If I don't get the
BitCoins, I will certainly send out your video recording to all of your contacts
including relatives, coworkers, and so forth. Having said that, if I receive the
payment, I'll destroy the recording immidiately. If you need evidence, reply with
"Yes!" and i'll definitely send your video recording to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
responding to this message.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 15 Aug 2018 00:00:28 -0700
Received: from mail.rosieweber.com ([46.161.42.100]:46559)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fppn9-00071N-3B
for ; Wed, 15 Aug 2018 00:00:28 -0700
From: "Augusta" <info>
To:
Message-ID: <0EB95FD1.0FBD042FECC5EC00@>
Importance: Normal
Date: Tue, 14 Aug 2018 23:59:45 -0700
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: It seems that, (), 's your password. Will possibly not know
me and you are probably wondering why you're getting this e-mail, right?
actually, I put in place a malware on the adult videos (adult porn) web site
and guess what, you visited this site to have fun (you really know what I
am talking about). Whilst you were watching videos, your internet browser
began functioning as a RDP (Remote Access) which provided me accessibility
to your screen and webcam. and then, my computer software obtained your entire
contacts from the Messenger, Outlook, Facebook, in addition to emails. [...]


Content analysis details: (18.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[46.161.42.100 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[46.161.42.100 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?46.161.42.100>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[46.161.42.100 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** :


It seems that, (), 's your password. Will possibly not know me and you are probably
wondering why you're getting this e-mail, right?

actually, I put in place a malware on the adult videos (adult porn) web site and
guess what, you visited this site to have fun (you really know what I am talking
about). Whilst you were watching videos, your internet browser began functioning as
a RDP (Remote Access) which provided me accessibility to your screen and webcam. and
then, my computer software obtained your entire contacts from the Messenger,
Outlook, Facebook, in addition to emails.

What did I really do?

I produced a double-screen video clip. 1st part shows the video you're watching (you
have got a good taste haha . . .), and 2nd part shows the recording of your web
camera.

exactly what should you do?

Well, in my opinion, $1100 is a fair price for our little hidden secret. You will
make the payment by Bitcoin (if you don't know this, search "how to purchase
bitcoin" search engines like google).

Bitcoin Address: 1JPReQ33vTvSXxE1G1yRHRfRRrGMLia1Cg
(It's case sensitive, so copy and paste it)

Very important:
You've 5 days to make the payment. (I've a completely unique pixel in this e-mail,
and at this moment I know you have read this email message). If I do not get the
BitCoins, I will certainly send your video recording to all of your contacts
including family members, colleagues, and so on. Having said that, if I receive the
payment, I'll destroy the video immidiately. If you'd like evidence, reply with
"Yes!" and I will undoubtedly send your videos to your 6 contacts. It is a
non-negotiable offer, that being said don't waste my personal time and yours by
answering this message.