HEX
Server: LiteSpeed
System: Linux dal1.hostclusters.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User: vslw (1496)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /home/vslw/mail/.spam/new/1750551953.M379471P2599652.dal1.hostclusters.com,S=9929,W=10131
Return-Path: <oxiwugoz@imap.emeyle.com>
Delivered-To: vslw+spam@dal1.hostclusters.com
Received: from dal1.hostclusters.com
	by dal1.hostclusters.com with LMTP
	id GHN3FpFNV2jkqicAaFRWGw
	(envelope-from <oxiwugoz@imap.emeyle.com>)
	for <vslw+spam@dal1.hostclusters.com>; Sat, 21 Jun 2025 19:25:53 -0500
Return-path: <oxiwugoz@imap.emeyle.com>
Envelope-to: uq@vslw.org
Delivery-date: Sat, 21 Jun 2025 19:25:53 -0500
Received: from static-200-105-158-53.acelerate.net ([200.105.158.53]:16645)
	by dal1.hostclusters.com with esmtp (Exim 4.98.2)
	(envelope-from <oxiwugoz@imap.emeyle.com>)
	id 1uT8Wy-0000000Auga-1aOp
	for uq@vslw.org;
	Sat, 21 Jun 2025 19:25:53 -0500
From: "rab zhixin" <oxiwugoz@imap.emeyle.com>
To: <uq@vslw.org>
Date: 21 Jun 2025 14:58:07 -0500
Message-ID: <002c01dbe2ea$013c9584$f8b21795$@imap.emeyle.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0029_01DBE2EA.0138D8F1"
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Ac4s3p1jkrsb8us44s3p1jkrsb8us4==
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.17514
X-Spam-Status: Yes, score=28.0
X-Spam-Score: 280
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dal1.hostclusters.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Untitled Document.mdThe data from all your devices is copied
    to my servers. I hacked your system! This is your last warning! You are visiting
    adult resources. Now your family, colleagues and friends w [...] 
 Content analysis details:   (28.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [200.105.158.53 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [200.105.158.53 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [200.105.158.53 listed in bl.score.senderscore.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.1 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  5.0 BTC_HASHBL_BLACK       Message contains BTC address found on BTC blacklist
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  4.2 GB_HASHBL_BTC          Message contains BTC address found on BTCBL
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.3 BITCOIN_SPAM_09        BitCoin spam pattern 09
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  8.5 KAM_CRIM               Extortion Email
  0.0 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  4.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  The data from all your devices is copied to my servers.

This is a multi-part message in MIME format.

------=_NextPart_000_0029_01DBE2EA.0138D8F1
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Untitled Document.mdThe data from all your devices is copied to my =
servers.
I hacked your system!
This is your last warning!
You are visiting adult resources.
Now your family, colleagues and friends will know about it.
All your gadgets are infected with the Trojan virus.
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.
I now have in front of me a video clip of the porn you were watching and =
your masturbation.
Your face is perfectly visible, everyone will recognize you.
I&#8217;m sure the video will destroy your reputation forever.
I plan to circulate the video to everyone you know.
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!
You can&#8217;t see when I connect to your camera.
You&#8217;re being monitored 24/7.
No antivirus will help you, no reinstalling the operating system or =
resetting your data.
Even if you change all your passwords and account information, I will =
know about it.
All the information is on my servers!
Don&#8217;t try to complain somewhere or share this letter.
It will end badly for you!
My address and my wallet are untraceable.
I will go straight to action and automatically start sending out the =
video and all of your information.
Writing back to me is useless. I don&#8217;t respond to emails.
As soon as you read the email, I get a notification. The timer has =
started.
You have 50 hours to make the payment. This is the only way to be safe!
Make a transfer of 1300$ USD to my wallet.
My bitcoin adress : 16kryN21kVXUcVFZBDLFtBrQcdNanFjF51
Detailed instructions are on Google.
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!
I&#8217;m sure we understand each other! Have a great day!

------=_NextPart_000_0029_01DBE2EA.0138D8F1
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dus-ascii" =
http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.7601.17514"></HEAD>
<BODY>
<DIV><SPAN class=3D980015484-21062025><FONT size=3D2=20
face=3DArial><!DOCTYPE html><html><head><meta =
charset=3D"utf-8"><title>Untitled =
Document.md</title><style></style></head><body id=3D"preview">
<p class=3D"has-line-data" data-line-start=3D"0" data-line-end=3D"1">The =
data from all your devices is copied to my servers.</p>
<p class=3D"has-line-data" data-line-start=3D"2" data-line-end=3D"4">I =
hacked your system!<br>
This is your last warning!</p>
<p class=3D"has-line-data" data-line-start=3D"5" data-line-end=3D"7">You =
are visiting adult resources.<br>
Now your family, colleagues and friends will know about it.</p>
<p class=3D"has-line-data" data-line-start=3D"8" =
data-line-end=3D"10">All your gadgets are infected with the Trojan =
virus.<br>
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.</p>
<p class=3D"has-line-data" data-line-start=3D"11" data-line-end=3D"14">I =
now have in front of me a video clip of the porn you were watching and =
your masturbation.<br>
Your face is perfectly visible, everyone will recognize you.<br>
I&#8217;m sure the video will destroy your reputation forever.</p>
<p class=3D"has-line-data" data-line-start=3D"15" data-line-end=3D"17">I =
plan to circulate the video to everyone you know.<br>
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!</p>
<p class=3D"has-line-data" data-line-start=3D"18" =
data-line-end=3D"21">You can&#8217;t see when I connect to your =
camera.<br>
You&#8217;re being monitored 24/7.<br>
No antivirus will help you, no reinstalling the operating system or =
resetting your data.</p>
<p class=3D"has-line-data" data-line-start=3D"22" =
data-line-end=3D"24">Even if you change all your passwords and account =
information, I will know about it.<br>
All the information is on my servers!</p>
<p class=3D"has-line-data" data-line-start=3D"25" =
data-line-end=3D"28">Don&#8217;t try to complain somewhere or share this =
letter.<br>
It will end badly for you!<br>
My address and my wallet are untraceable.</p>
<p class=3D"has-line-data" data-line-start=3D"29" data-line-end=3D"32">I =
will go straight to action and automatically start sending out the video =
and all of your information.<br>
Writing back to me is useless. I don&#8217;t respond to emails.<br>
As soon as you read the email, I get a notification. The timer has =
started.</p>
<p class=3D"has-line-data" data-line-start=3D"33" =
data-line-end=3D"34">You have 50 hours to make the payment. This is the =
only way to be safe!</p>
<p class=3D"has-line-data" data-line-start=3D"35" =
data-line-end=3D"36">Make a transfer of 1300$ USD to my wallet.</p>
<p class=3D"has-line-data" data-line-start=3D"37" =
data-line-end=3D"38">My bitcoin adress : =
16kryN21kVXUcVFZBDLFtBrQcdNanFjF51</p>
<p class=3D"has-line-data" data-line-start=3D"39" =
data-line-end=3D"43">Detailed instructions are on Google.<br>
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!<br>
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!<br>
I&#8217;m sure we understand each other! Have a great day!</p>

</body></html></FONT></SPAN></DIV></BODY></HTML>
------=_NextPart_000_0029_01DBE2EA.0138D8F1--